Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

28.03.2011, 20:44
kjz1
Aus der Mugu-Kiste klettern noch:

header:
```
01: Received: from 60-250-204-242.HINET-IP.hinet.net (EHLO
02: ns.autolease.com.tw) [60.250.204.242]
03:   by mx0.gmx.net (mx042) with SMTP; 21 Mar 2011 xx:xx:xx +0100
04: Received: from User (41-184-49-141.rv.ipnxtelecoms.com [41.184.49.141])
05: 	(authenticated bits=0)
06: 	by ns.autolease.com.tw (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
07: 	Mon, 21 Mar 2011 xx:xx:xx +0800
```
Muguphon: +234 803 698 9559 ---> MTN Nigeria Communications Ltd.

Muguphon: +234 1 472 3032 ---> Lagos, Nigeria

die Amsterdam-Konnektion:

header:
```
01: Received: from mail19a.g19.rapidsite.net (mail19a.g19.rapidsite.net
02: [204.202.242.24])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 24 Mar 2011 xx:xx:xx +0100 (CET)
05: Received: from mx38.stngva01.us.mxservers.net (204.202.242.43)
06: 	by mail19a.g19.rapidsite.net (RS ver 1.0.95vs) with SMTP ID: [ID filtered]
07: 	for xxxxx; Thu, 24 Mar 2011 xx:xx:xx -0400 (EDT)
08: Received: from unknown [161.58.134.103] (EHLO mmp1906.dulles19-verio.com)
09: 	by va1-mx38.stngva01.us.mxservers.net (mxl_mta-3.1.0-05)
10: 	with ESMTP id
11: 77d8b8d4.2327837600.146474.00-008.va1-mx38.stngva01.us.mxservers.net
12: (envelope-from <jv [at] virtueco.com>);
13: 	Thu, 24 Mar 2011 xx:xx:xx -0400 (EDT)
14: Received: (qmail 89003 invoked by UID: [UID filtered]
```
Muguphon: +31 626 006 051 ---> Telfort B.V., NL/Tiscali

header:
```
01: Received: from astalaw.com
02: (static-71-249-220-148.nycmny.east.verizon.net [71.249.220.148])
03: 	by mx.kundenserver.de (node=mxbap2) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from User ([41.203.64.253]) by astalaw.com with Microsoft
07: SMTPSVC(6.0.3790.4675);
08: 	 Sun, 27 Mar 2011 xx:xx:xx -0400
```
IP: 41.203.64.253 ---> GLO-Mobile Network Services, Nigeria

Muguphon: +234-803-928-8280 ---> MTN Nigeria Communications Ltd.

header:
```
01: Received: from mail.visainfo.kz (EHLO mail.visainfo.kz) [88.204.133.147]
02:   by mx0.gmx.net (mx089) with SMTP; 27 Mar 2011 xx:xx:xx +0200
03: Received: from User ([141.149.190.189])
04: 	(authenticated user info [at] visainfo.kz)
05: 	by mail.visainfo.kz;
06: 	Fri, 25 Mar 2011 xx:xx:xx +0600
```
IP: 141.149.190.189 ---> static-141-149-190-189.bos.east.verizon.net

Und weil der Mugu so dreist ist, hier mal das volle Märchen:

Zitat:

Dear Sir/Madam,

LETTER OF COMPENSATION/SETTLEMENT.

This letter will definately be amazing to you because of it’s realistic
value.Sorry for the inconveniences that was rendered to you in your line
of Inheritance Payment transaction with some impersonators some while ago.

I know that this letter will hit you by surprise, but firstly I will
like to introduce myself; I am (Mr.Eddie Morgan) the Legal chairman of
"ICPC", (Nigeria Anti-Fraud Unit).

On the 1st of October 2007, the President of The Federal Republic of
Nigeria (Chief Umar Yar'adua) introduced a Commission named the "ICPC",
(Nigeria's Anti-Fraud Unit) which is duly registered under the United
Nations (U.N.O). This particular Commission was initiated to detect
fraud/funds delay/impersonation of Government Officials. Secondly, we
are mandated by the US Government to Settle foreign debts/fraud
victims/Un-paid beneficiaries to satisfactory in other to maintain peace
in the world at large and also to create a good relationship with the
international bodies.

Presently, we are being paid by the American government inother to avert
beneficiary funds delays/fraud here in Nigeria.

So far, we have settled the case likes of (Mrs. Debbie Hargrove, Mr.
Micheal Wagner etc).You are being contacted by this office today dated
(22nd March 2011) because your Case File (A) is the very first File on
our Settlement Files Cabinet. From our Intelligent investigations and
Probing processes we discovered that you are a victim of fraud/funds delay..

The "ICPC", is faithfully under my governance as the Legal Chairman of
the great Commission and to this Authority I took an oath of allegiance
to settle all fraud victims peacefully.

This Memorandum is to notify you that you will be settled by the
Nigerian Government from our initial Deposit Account with HSBC Bank Plc
London-Uk. You will be settled with the actual amount which you lost in
your previous transaction, including your Inheritance Funds.

Your settlement will be actualized within 3working days after your
response to this Official Letter.

For further clearification/investigation kindly send the below
informations to us immediately:()

1. Your residential address.
2. Mobile and fax number (for regular official contact).
3. Your inheritance funds value.
4. Amount which you have lost previously.

These above-mentioned informations will officially enable us to carry
out our verification processes and after that your compensation
sum/Inheritance Funds will be Electronically wired into your designated
Bank account.

Your immediate compliance to this will expedite actions on your Payment
because here in this office, we have alot of listed victims to be settled.

Officially Signed,
Mr. Eddie Morgan.
Chairman ICPC Nigeria.

- kjz

header:

01: MIME-version: 1.0
02: Content-transfer-encoding: 7BIT
03: Content-type: text/plain; charset=Windows-1251
04: Received: from User ([120.140.95.94]) by mta6.hosting.tp.pl (m6)
05:  with ESMTPA ID: [ID filtered]
06:  my.address [at] firma.tld; Thu, 31 Mar 2011 xx:xx:xx +0200 (CEST)
07: Message-ID: [ID filtered]
08: Sender: dariusz.jankowski9 [at] neostrada.pl
09: Reply-to: mrsleewong.c1 [at] hksaps.coms.hk
10: From: lee <dariusz.jankowski9 [at] neostrada.pl>
11: Subject: PROPOSAL
12: Date: Fri, 01 Apr 2011 xx:xx:xx -0700
13: X-Junkmail-SD-Raw: score=unknown,
14:     refid=str=0001.0A0B0203.4D9508BF.00A5,ss=1,fgs=0,
15:     ip=193.110.120.20,
16:     so=2009-06-02 xx:xx:xx,
17:     dmn=5.7.1/2009-08-27,
18:     mode=single engine
19: Bcc:
20: Return-Path: dariusz.jankowski9 [at] neostrada.pl

Zitat:

CAN I TRUST YOU I HAVE A BUSINESS PROPOSAL FOR YOU IF INTERESTED REPLY
VIA (.hk).

Eniac

Frank und frei aus Mugu-Land:

die Madrid-Konnektion vom Sternchen-Mugu dank merkbefreiter France Telecom:

header:

01: Received: from 77-223-128-194.ocranix.com (EHLO server.metinsoft.com)
02: [77.223.128.194]
03:   by mx0.gmx.net (mx052) with SMTP; 28 Mar 2011 xx:xx:xx +0200
04: Received: from [90.170.106.129] (helo=User)
05: 	by server.metinsoft.com with esmtpa (Exim 4.69)
06: 	(envelope-from <ming.yang1 [at] nba2k.com.cn>)
07: 	ID: [ID filtered]

header:

01: Received: from mail.gwschool.com (EHLO mail.gwschool.com) [12.181.174.10]
02:   by mx0.gmx.net (mx066) with SMTP; 04 Apr 2011 xx:xx:xx +0200
03: Received: from User ([90.170.106.129])
04: 	(authenticated user maryann [at] gwschool.com)
05: 	by mail.gwschool.com (Kerio MailServer 6.5.0 patch 1);
06: 	Sat, 26 Mar 2011 xx:xx:xx -0700

IP: 90.170.106.129 ---> France Telecom Espana SA

Zitat:

*Yours Truly,*
*Ming Yang.*

header:

01: Received: from mail.chairman-emi.com (59-125-122-13.HINET-IP.hinet.net
02: [59.125.122.13])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 29 Mar 2011 xx:xx:xx +0200 (CEST)
05: Received: from User (unknown [82.128.109.174])
06: 	by mail.chairman-emi.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Tue, 29 Mar 2011 xx:xx:xx +0800 (CST)

IP: 82.128.109.174 ---> Multilinks Telecommunications Limited, Nigeria

- kjz

Wer sagt denn, dass es da nicht noch mehr gibt:

gecracktes Squirrel-Mail:

header:

01: Received: from mail.fourhgroup.com (EHLO mail.fourhgroup.com)
02: [202.65.169.10]
03:   by mx0.gmx.net (mx081) with SMTP; 30 Mar 2011 xx:xx:xx +0200
04: User-Agent: SquirrelMail/1.4.8-4.fc5

der Yahoo/ATT-Mugu:

header:

01: Received: from nm22.bullet.mail.ac4.yahoo.com
02: (nm22.bullet.mail.ac4.yahoo.com [98.139.52.219])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 30 Mar 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.52.188] by nm22.bullet.mail.ac4.yahoo.com with
06: NNFMP; 30 Mar 2011 xx:xx:xx -0000
07: Received: from [98.139.52.167] by tm1.bullet.mail.ac4.yahoo.com with
08: NNFMP; 30 Mar 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1050.mail.ac4.yahoo.com with NNFMP; 30
10: Mar 2011 xx:xx:xx -0000
11: Received: (qmail 32366 invoked from network); 30 Mar 2011 xx:xx:xx -0000
12: Received: from User (officefile771771 [at] 41.191.86.145 with login)
13:         by smtp114.biz.mail.re2.yahoo.com with SMTP; 30 Mar 2011
14: xx:xx:xx -0700 PDT

IP: 41.191.86.145 ---> CYBER_FE_5S, Benin

Muguphon: +22999387169 ---> mobile number, Benin

header:

01: Received: from www.1worldcom.net (EHLO www.1worldcom.net) [195.216.192.129]
02:   by mx0.gmx.net (mx038) with SMTP; 31 Mar 2011 xx:xx:xx +0200
03: Received: from localhost (www [127.0.0.1])
04: 	by www.1worldcom.net (iRedMail) with ESMTP ID: [ID filtered]
05: 	Thu, 31 Mar 2011 xx:xx:xx +0200 (CEST)
06: Received: from www.1worldcom.net ([127.0.0.1])
07: 	by localhost (www.1worldcom.net [127.0.0.1]) (amavisd-new, port 10024)
08: 	with ESMTP ID: [ID filtered]
09: Received: from User (interc25.lnk.telstra.net [203.45.57.180])
10: 	by www.1worldcom.net (iRedMail) with ESMTPA ID: [ID filtered]
11: 	Thu, 31 Mar 2011 xx:xx:xx +0200 (CEST)

gecracktes Squirrel-Mail:

header:

01: Received: from cartero4.sci.uma.es (EHLO cartero2.sci.uma.es)
02: [150.214.47.233]
03:   by mx0.gmx.net (mx106) with SMTP; 01 Apr 2011 xx:xx:xx +0200
04: Received: from correo2.uma.es (vesta2.sci.uma.es [192.168.23.9])
05: 	by cartero2.sci.uma.es (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri,  1 Apr 2011 xx:xx:xx +0200 (CEST)
07: Received: from gw.uma.es (terpsicore.sci.uma.es [150.214.40.77])
08: 	by correo2.uma.es (Postfix) with ESMTP ID: [ID filtered]
09: 	Fri,  1 Apr 2011 xx:xx:xx +0200 (CEST)
10: Received: from 41.190.90.150
11:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
12:         by gw.uma.es with HTTP;
13:         Fri, 1 Apr 2011 xx:xx:xx +0200 (CEST)

IP: 41.190.90.150 ---> Zain Communications Ltd., Ghana

Muguphon: +233540432615 ---> ScanCom Ltd (MTN), Ghana

gecracktes Squirrel-Mail:

header:

01: Received: from slcf596-z.piensasolutions.com (EHLO
02: slcf596-z.piensasolutions.com) [217.76.150.175]
03:   by mx0.gmx.net (mx083) with SMTP; 02 Apr 2011 xx:xx:xx +0200
04: Received: from mail.ecoludic.com (localhost.localdomain [127.0.0.1])
05: 	by slcf596-z.piensasolutions.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri,  1 Apr 2011 xx:xx:xx +0200 (CEST)
07: Received: from 196.46.245.34
08:         by mail.ecoludic.com with HTTP;
09:         Fri, 1 Apr 2011 xx:xx:xx +0200 (CEST)
10: User-Agent: SquirrelMail/1.4.8-5.el5_4.10

IP: 196.46.245.34 ---> Celtel Nigeria Limited t.a ZAIN

header:

01: Received: from mail.bradentonccra.com (EHLO mail.bradentonccra.com)
02: [75.77.81.98]
03:   by mx0.gmx.net (mx017) with SMTP; 02 Apr 2011 xx:xx:xx +0200
04: Received: from User ([74.10.42.158]) by mail.bradentonccra.com with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Fri, 1 Apr 2011 xx:xx:xx -0400

IP: 74.10.42.158 ---> PACIFIC GLOBAL INVESTMENT MANAGEMENT COMPANY

header:

01: Received: from nm28.bullet.mail.sp2.yahoo.com
02: (nm28.bullet.mail.sp2.yahoo.com [98.139.91.98])
03: 	by spammotel.com (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 15 Feb 2011 xx:xx:xx -0500 (EST)
05: Received: from [98.139.91.70] by nm28.bullet.mail.sp2.yahoo.com with
06: NNFMP; 15 Feb 2011 xx:xx:xx -0000
07: Received: from [98.139.91.46] by tm10.bullet.mail.sp2.yahoo.com with
08: NNFMP; 15 Feb 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1046.mail.sp2.yahoo.com with NNFMP; 15
10: Feb 2011 xx:xx:xx -0000
11: Received: (qmail 93304 invoked by UID: [UID filtered]
12: Received: from [213.154.88.181] by web43514.mail.sp1.yahoo.com via HTTP;
13: Tue, 15 Feb 2011 xx:xx:xx PST

IP: 213.154.88.181 ---> Sonatel Multimedia, SN

- kjz

Frisch auf den Tisch:

der Yahoo/ATT-Mugu:

header:
01: Received: from nm9.access.bullet.mail.sp2.yahoo.com
02: (nm9.access.bullet.mail.sp2.yahoo.com [98.139.44.136])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Mon,  4 Apr 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.44.106] by nm9.access.bullet.mail.sp2.yahoo.com
06: with NNFMP; 03 Apr 2011 xx:xx:xx -0000
07: Received: from [98.139.44.83] by tm11.access.bullet.mail.sp2.yahoo.com
08: with NNFMP; 03 Apr 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1020.access.mail.sp2.yahoo.com with
10: NNFMP; 03 Apr 2011 xx:xx:xx -0000
11: Received: (qmail 10899 invoked by UID: [UID filtered]
12: Received: from [41.241.183.118] by web180206.mail.gq1.yahoo.com via
13: HTTP; Sun, 03 Apr 2011 xx:xx:xx PDT
IP: 41.241.183.118 ---> dsl-241-183-118.telkomadsl.co.za

die Madrid-Konnektion vom Sternchen-Mugu via gecracktem Account:

header:
01: Received: from mail.gwschool.com (EHLO mail.gwschool.com) [12.181.174.10]
02:   by mx0.gmx.net (mx066) with SMTP; 04 Apr 2011 xx:xx:xx +0200
03: Received: from User ([90.170.106.129])
04: 	(authenticated user maryann [at] gwschool.com)
05: 	by mail.gwschool.com (Kerio MailServer 6.5.0 patch 1);
06: 	Sat, 26 Mar 2011 xx:xx:xx -0700
IP: 90.170.106.129 ---> France Telecom Espana SA

Zitat:

**
*Yours Truly,*
*Ming Yang.*

Und wieder der Yahoo/ATT-Mugu:

header:
01: Received: from nm9.access.bullet.mail.sp2.yahoo.com
02: (nm9.access.bullet.mail.sp2.yahoo.com [98.139.44.136])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Mon,  4 Apr 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.44.106] by nm9.access.bullet.mail.sp2.yahoo.com
06: with NNFMP; 03 Apr 2011 xx:xx:xx -0000
07: Received: from [98.139.44.83] by tm11.access.bullet.mail.sp2.yahoo.com
08: with NNFMP; 03 Apr 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1020.access.mail.sp2.yahoo.com with
10: NNFMP; 03 Apr 2011 xx:xx:xx -0000
11: Received: (qmail 10899 invoked by UID: [UID filtered]
12: Received: from [41.241.183.118] by web180206.mail.gq1.yahoo.com via
13: HTTP; Sun, 03 Apr 2011 xx:xx:xx PDT
IP: 41.241.183.118 ---> dsl-241-183-118.telkomadsl.co.za

header:
01: Received: from server1.monalisa.com.py (EHLO server1.monalisa.com.py)
02: [201.217.52.74]
03:   by mx0.gmx.net (mx070) with SMTP; 04 Apr 2011 xx:xx:xx +0200
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by server1.monalisa.com.py (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun,  3 Apr 2011 xx:xx:xx -0300 (PYST)
07: X-Virus-Scanned: amavisd-new at server1.monalisa.com.py
08: Received: from server1.monalisa.com.py ([127.0.0.1])
09: 	by localhost (server1.monalisa.com.py [127.0.0.1]) (amavisd-new, port
10: 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from User (unknown [41.217.65.10])
13: 	by server1.monalisa.com.py (Postfix) with ESMTPA ID: [ID filtered]
14: 	Sun,  3 Apr 2011 xx:xx:xx -0300 (PYST)
IP: 41.217.65.10 ---> ZOOM Mobile Nigeria Ltd.

header:
01: Received: from 211-20-91-43.HINET-IP.hinet.net (EHLO rrs.com.tw)
02: [211.20.91.43]
03:   by mx0.gmx.net (mx063) with SMTP; 06 Apr 2011 xx:xx:xx +0200
04: Received: from User ([41.203.64.254])
05: 	(authenticated bits=0)
06: 	by rrs.com.tw (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
07: 	Thu, 7 Apr 2011 xx:xx:xx +0800 (CST)
08: 	(envelope-from un.un011 [at] rediffmail.com)
IP: 41.203.64.254 ---> GLO-Mobile Network Services, Nigeria

header:
01: Received: from omr-d33.mx.aol.com (EHLO omr-d33.mx.aol.com)
02: [205.188.249.131]
03:   by mx0.gmx.net (mx104) with SMTP; 07 Apr 2011 xx:xx:xx +0200
04: Received: from oms-ma02.r1000.mx.aol.com (oms-ma02.r1000.mx.aol.com
05: [64.12.140.130])
06: 	by omr-d33.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Thu, 7 Apr 2011 xx:xx:xx -0400
08: Message-ID: [ID filtered]
09: Received: from mtaout-ma02.r1000.mx.aol.com
10: (mtaout-ma02.r1000.mx.aol.com [172.29.41.2])
11: 	by oms-ma02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: E4DFC38000081;
13: 	Thu,  7 Apr 2011 xx:xx:xx -0400 (EDT)
14: Received: from timmcconk (66-79-39-212.dsl.coastalnow.net [66.79.39.212])
15: 	by mtaout-ma02.r1000.mx.aol.com (MUA/Third Party Client Interface) with
16: ESMTPA ID: [ID filtered]
17: 	Thu,  7 Apr 2011 xx:xx:xx -0400 (EDT)
Meine Mugus gehen auch mit der Zeit:

Zitat:

My name is Mr. David Bright. I was one of the personal assistants to the
ousted former president Hosni Mubarak of Egypt. Since after my boss was
chased away by demonstrators about a month ago, many countries have
seized his assets and funds and those belonging to his aides/close
associates.

READ THE ATTACHED MESSAGE FOR MORE DETAILS

Dear Sir/Madam,

My name is Mr. David Bright. I was one of the personal assistants to the
ousted former president Hosni Mubarak of Egypt. Since after my boss was
chased away by demonstrators about a month ago, many countries have
seized his assets and funds and those belonging to his aides/close
associates. So far, about usd$20billion United States dollars have been
seized in Switzerland, London and other European nations! I therefore
write this letter to you to solicit your support for the safe keeping of
the sum of usd$200million (TWO HUNDRED MILLION UNITED STATES DOLLARS ONLY).

The said sum is presently deposited in a secret account with HALIFAX
BANK, LONDN in THE UNITED KINGDOM with the account name of THOMAS ROBLEE
as the account holder/family trustee of the said funds in the bank.
Because of the fact that we are in hiding since after the ouster of my
boss, I or any member of my family or associate cannot claim these funds
that is why I ask for your kind assistance and support. You will present
yourself as the next if kin/beneficiary to the said funds. All documents
relating to the funds will be changed to your name as the owner so that
you can get the funds out from the bank to any account of your choice. I
am willing to give you 20% of the amount for your assistance but just
help me get these funds before the U.K government discovers and
confiscates it also. Already, they have taken a lot from us and we
cannot afford to loose more funds to them as they are looking for more
to confiscate, which is why I need your urgent help to save these funds.

All you have to do is just present yourself as the beneficiary of the
funds with the legally notarized documentations. You will receive the
payment directly at the HALIFAX BANK in London or at your request; the
bank can wire the funds directly to any account of your choice once all
the transfer processes and documentations have been cleared.

Get back to me urgently if you are interested to assist using my direct
email…. Or you can call my mobile number here in the U.K….

Thanks for your anticipated kind response.

Yours Truly,
ABDELKRIM BERRADA..

- kjz

header:

01: Message-ID: [ID filtered]
02: Received: from [46.37.187.90] by web100511.mail.kks.yahoo.co.jp via HTTP; Fri,
03: 	08 Apr 2011 xx:xx:xx JST
04: Date: Fri, 8 Apr 2011 xx:xx:xx +0900 (JST)
05: From: Philip Mensa <philipmensa1 [at] yahoo.co.jp>
06: Reply-To: philipmensa [at] rediffmail.com
07: Subject: PLEASE GET BACK TO ME
08: To: poor [at] spamvictim.tld
09: MIME-Version: 1.0
10: Content-Type: multipart/alternative; boundary="0-1372897821-1302229800=:46176"
11: X-Junkmail-SD-Raw: score=unknown,
12:     refid=str=0001.0A0B0203.4D9E74BC.0027,ss=1,fgs=0,
13:     ip=183.79.28.141,
14:     so=2009-06-02 xx:xx:xx,
15:     dmn=5.7.1/2009-08-27,
16:     mode=single engine
17: Return-Path: philipmensa1 [at] yahoo.co.jp

Zitat:

??????????????????

??????????:

I have a proposal of $7.5million.Which will benefit the both of us.If this may interest you please get back to me so that i can furnish you with the full details.

I will be waiting to hear from you.

Regards,

- Philip Mensa

Eniac

Dann wollen wir mal wieder:

der Wörterbuch-Mugu:

header:

01: Received: from ns2.geneology.co.za (ns2.geneology.co.za [196.41.3.55])
02: 	by mx.kundenserver.de (node=mxbap2) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from User ([221.1.215.90])
06:         by ns2.geneology.co.za (GenePool.MailServer.v9.3.2.0) with ASMTP
07: ID: [ID filtered]
08:         Tue, 05 Apr 2011 xx:xx:xx +0200

header:

01: eceived: from ns2.geneology.co.za (EHLO ns2.geneology.co.za) [196.41.3.55]
02:   by mx0.gmx.net (mx043) with SMTP; 05 Apr 2011 xx:xx:xx +0200
03: Received: from User ([221.1.215.90])
04:         by ns2.geneology.co.za (GenePool.MailServer.v9.3.2.0) with ASMTP
05: ID: [ID filtered]
06:         Tue, 05 Apr 2011 xx:xx:xx +0200

header:

01: Received: from ns2.geneology.co.za (EHLO ns2.geneology.co.za) [196.41.3.55]
02:   by mx0.gmx.net (mx034) with SMTP; 05 Apr 2011 xx:xx:xx +0200
03: Received: from User ([221.1.215.90])
04:         by ns2.geneology.co.za (GenePool.MailServer.v9.3.2.0) with ASMTP
05: ID: [ID filtered]
06:         Tue, 05 Apr 2011 xx:xx:xx +0200

IP: 221.1.215.90 ---> China Unicom Shandong

header:

01: Received: from asteria.biz ([210.158.44.227])
02: 	by mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from localhost (localhost [127.0.0.1])
06: 	by asteria.biz (Postfix) with ESMTP ID: [ID filtered]
07: 	Sun,  3 Apr 2011 xx:xx:xx +0900 (JST)
08: Received: from asteria.biz ([127.0.0.1])
09: 	by localhost (adcserver1.asteria.biz [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from User (unknown [115.164.162.117])
12: 	by asteria.biz (Postfix) with ESMTPSA ID: [ID filtered]
13: 	Sat,  2 Apr 2011 xx:xx:xx +0900 (JST)

IP: 115.164.162.117 ---> DiGi Telecommunications Sdn Bhd, MY

Muguphon: +60164340172 ---> DiGi Telecom, Malaysia

gecracktes SquirrelMail:

header:

01: Received: from correo.etna.com.pe (correo.etna.com.pe [200.62.178.50])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	Wed,  6 Apr 2011 xx:xx:xx -0400 (EDT)
04: Received: from localhost (localhost [127.0.0.1])
05: 	by correo.etna.com.pe (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed,  6 Apr 2011 xx:xx:xx -0500 (PET)
07: X-Virus-Scanned: Debian amavisd-new at etna.com.pe
08: Received: from correo.etna.com.pe ([127.0.0.1])
09: 	by localhost (correo.etna.com.pe [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from www.etna.com.pe (localhost [127.0.0.1])
12: 	by correo.etna.com.pe (Postfix) with ESMTP ID: [ID filtered]
13: 	Wed,  6 Apr 2011 xx:xx:xx -0500 (PET)
14: Received: from 41.203.64.254
15:         (SquirrelMail authenticated user maestranza)
16:         by www.etna.com.pe with HTTP;
17:         Wed, 6 Apr 2011 xx:xx:xx -0500 (PET)

IP: 41.203.64.254 ---> GLO-Mobile Network Services, Nigeria

Muguphon: +44 703 190 1802 ---> Magrathea Telecommunications Limited, UK

Mugufax: +44 700 606 6349 ---> Call Sciences Limited, UK/Yac

header:

01: Received: from mail1.theblogtv.smtp.contactlab.it
02: (mail1.theblogtv.smtp.contactlab.it [93.94.37.148])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu,  7 Apr 2011 xx:xx:xx +0200 (CEST)
05: Received: from [172.16.6.215] ([172.16.6.215:60197]
06: helo=mx207.lan.contactlab.it)
07: 	by t.contactlab.it (envelope-from <463854.1.2002564 [at] t.contactlab.it>)
08: 	(ecelerity 3.0.28.38595 r(38597)) with ESMTP
09: 	ID: [ID filtered]
10: Received: from 172.16.6.231 ([172.16.6.231])
11:           by mx207.lan.contactlab.it (ContactLab SmartRelay 1.0) with
12: SMTP ID: [ID filtered]
13:           for xxxxx;
14:           Thu, 7 Apr 2011 xx:xx:xx +0200 (CEST)
15: Received: from [83.211.3.206] ([83.211.3.206:40890]
16: helo=ip-3-206.sn2.eutelia.it)
17: 	by t.contactlab.it (envelope-from <andrea30 [at] juventusmember.com>)
18: 	(ecelerity 3.0.28.38595 r(38597)) with ESMTP
19: 	ID: [ID filtered]
20: Received: from mailserver.juventusmember.com (mail.juventusmember.com
21: [212.66.107.150])
22: 	by ip-3-206.sn2.eutelia.it (Postfix) with ESMTP ID: [ID filtered]
23: 	Thu,  7 Apr 2011 xx:xx:xx +0200 (CEST)
24: Received: by mailserver.juventusmember.com (Postfix, from userID: [ID filtered]
25: 	ID: [ID filtered]

Und wieder der Wörterbuch-Mugu:

header:

01: Received: from ns2.geneology.co.za (ns2.geneology.co.za [196.41.3.55])
02: 	by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from User ([61.164.40.151])
06:         by ns2.geneology.co.za (GenePool.MailServer.v9.3.2.0) with ASMTP
07: ID: [ID filtered]
08:         Thu, 07 Apr 2011 xx:xx:xx +0200

header:

01: Received: from ns2.geneology.co.za (EHLO ns2.geneology.co.za) [196.41.3.55]
02:   by mx0.gmx.net (mx088) with SMTP; 07 Apr 2011 xx:xx:xx +0200
03: Received: from User ([61.164.40.151])
04:         by ns2.geneology.co.za (GenePool.MailServer.v9.3.2.0) with ASMTP
05: ID: [ID filtered]
06:         Thu, 07 Apr 2011 xx:xx:xx +0200

header:

01: Received: from ns2.geneology.co.za (EHLO ns2.geneology.co.za) [196.41.3.55]
02:   by mx0.gmx.net (mx087) with SMTP; 07 Apr 2011 xx:xx:xx +0200
03: Received: from User ([61.164.40.151])
04:         by ns2.geneology.co.za (GenePool.MailServer.v9.3.2.0) with ASMTP
05: ID: [ID filtered]
06:         Thu, 07 Apr 2011 xx:xx:xx +0200

IP: 61.164.40.151 ---> HZ-DINGDIAN-FINANCIAL-LTD, CN

header:

01: Received: from mx4.hotmail.com ([174.128.238.244])
02: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200

IP: 174.128.238.244 ---> SHARKTECH INTERNET SERVICES

Muguphon: +1 559 257 4096 ---> Pac - West Telecomm, Inc.

gecrackter Account:

header:

01: Received: from ns1.idbrasil.org.br (EHLO mc242.static.gvt.net.br)
02: [187.58.205.242]
03:   by mx0.gmx.net (mx052) with SMTP; 09 Apr 2011 xx:xx:xx +0200
04: Received: from User (unknown [41.203.64.254])
05: 	by mc242.static.gvt.net.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat,  9 Apr 2011 xx:xx:xx -0300 (BRT)

IP: 41.203.64.254 ---> GLO-Mobile Network Services, Nigeria

gecrackter Account:

header:

01: Received: from mail.bupt.edu.cn (EHLO mail.bupt.edu.cn) [211.68.71.7]
02:   by mx0.gmx.net (mx108) with SMTP; 09 Apr 2011 xx:xx:xx +0200
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by mx3.bupt.edu.cn (Postfix) with SMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 10 Apr 2011 xx:xx:xx +0800 (CST)
06: Received: from User (host50-55-static.51-88-b.business.telecomitalia.it
07: [88.51.55.50])
08: 	by mx3.bupt.edu.cn (Postfix) with ESMTP ID: [ID filtered]
09: 	Sat,  9 Apr 2011 xx:xx:xx +0800 (CST)

- kjz

Auch bei den Mugus kehrt eine gewisse Flaute ein: :wicked:

header:

01: Received: from nm27-vm5.bullet.mail.ne1.yahoo.com
02: (nm27-vm5.bullet.mail.ne1.yahoo.com [98.138.91.249])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 17 Apr 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.138.90.55] by nm27.bullet.mail.ne1.yahoo.com with
06: NNFMP; 17 Apr 2011 xx:xx:xx -0000
07: Received: from [98.138.84.36] by tm8.bullet.mail.ne1.yahoo.com with
08: NNFMP; 17 Apr 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by smtp104.mail.ne1.yahoo.com with NNFMP; 17
10: Apr 2011 xx:xx:xx -0000
11: Received: from yahoo.com (migdaliayyuk [at] 110.138.154.239 with login)
12:         by smtp104.mail.ne1.yahoo.com with SMTP; 16 Apr 2011 xx:xx:xx
13: -0700 PDT  
14: Received: from [91.51.82.223] by rsmail.alkoholic.net with SMTP; Sun, 17
15: Apr 2011 xx:xx:xx -0400
16: Received: from rly04.hottestmile.com [155.161.207.87] by
17: smtp-server1.cfdenselr.com with QMQP; Sun, 17 Apr 2011 xx:xx:xx -0400
18: Received: from smtp.mixedthings.net [145.144.250.82] by
19: nntp.pinxodet.net with SMTP; Sun, 17 Apr 2011 xx:xx:xx -0400
20: Received: from qnx.mdrost.com [86.106.242.82] by qnx.mdrost.com with
21: SMTP; Sun, 17 Apr 2011 xx:xx:xx -0400

header:

01: Received: from 59-124-12-58.HINET-IP.hinet.net (EHLO server.ciaa.com.tw)
02: [59.124.12.58]
03:   by mx0.gmx.net (mx052) with SMTP; 22 Apr 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by server.ciaa.com.tw (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 22 Apr 2011 xx:xx:xx +0800 (CST)
07: X-Virus-Scanned: Debian amavisd-new at ciaa.com.tw
08: Received: from server.ciaa.com.tw ([127.0.0.1])
09: 	by localhost (server.ciaa.com.tw [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from User (unknown [202.102.72.59])
12: 	(Authenticated sender: joey)
13: 	by server.ciaa.com.tw (Postfix) with ESMTPA ID: [ID filtered]
14: 	Fri, 22 Apr 2011 xx:xx:xx +0800 (CST)

IP: 202.102.72.59 ---> CHINANET jiangsu

header:

01: Received: from mx.filter2.content.vf.net.nz (mailfilter2.ihug.co.nz
02: [203.109.136.2])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from out.webmail6.content.vf.net.nz (HELO
07: webmail.vodafone.co.nz) ([203.109.137.26])
08:   by cust.filter2.content.vf.net.nz with ESMTP; 24 Apr 2011 xx:xx:xx +1200

alter Bekannter:
SenderIP: 178.162.174.171 ---> Leaseweb Germany GmbH

header:

01: Received: from ns1.l-net.ru (EHLO ns1.l-net.ru) [83.234.220.253]
02:   by mx0.gmx.net (mx106) with SMTP; 23 Apr 2011 xx:xx:xx +0200
03: Received: from User (unknown [82.128.81.87])
04: 	by ns1.l-net.ru (Postfix) with ESMTPA ID: [ID filtered]
05: 	Sun, 24 Apr 2011 xx:xx:xx +0400 (MSD)

IP: 82.128.81.87 ---> Multilinks Telecommunications Limited, Nigeria

die Madrid-Konnektion:

header:

01: Received: from furchet.ice.ru (EHLO communiware2.cust.rinet.ru)
02: [195.91.166.126]
03:   by mx0.gmx.net (mx097) with SMTP; 25 Apr 2011 xx:xx:xx +0200
04: Received: from mail.kazks.kz (mail.auit.ru [195.91.166.116])
05: 	by communiware2.cust.rinet.ru (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon, 25 Apr 2011 xx:xx:xx +0400 (MSD)
07: Received: from [87.223.101.79] (account aaa [at] auit.ru HELO User)
08:   by mail.kazks.kz (CommuniGate Pro SMTP 4.1.8)
09:   with ESMTP ID: [ID filtered]

IP: 87.223.101.79 ---> 79.101.223.87.dynamic.jazztel.es

- kjz

Und noch ein paar Mugus:

header:

01: Received: from idiomas.udea.edu.co (idiomas.udea.edu.co [200.24.17.72])
02: 	by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from idiomas.udea.edu.co (localhost [127.0.0.1])
06: 	by idiomas.udea.edu.co (Postfix) with ESMTP ID: [ID filtered]
07: 	Tue, 19 Apr 2011 xx:xx:xx -0500 (COT)

header:

01: Received: from idiomas.udea.edu.co (EHLO idiomas.udea.edu.co) [200.24.17.72]
02:   by mx0.gmx.net (mx051) with SMTP; 20 Apr 2011 xx:xx:xx +0200
03: Received: from idiomas.udea.edu.co (localhost [127.0.0.1])
04: 	by idiomas.udea.edu.co (Postfix) with ESMTP ID: [ID filtered]
05: 	Tue, 19 Apr 2011 xx:xx:xx -0500 (COT)

header:

01: Received: from idiomas.udea.edu.co (EHLO idiomas.udea.edu.co) [200.24.17.72]
02:   by mx0.gmx.net (mx067) with SMTP; 20 Apr 2011 xx:xx:xx +0200
03: Received: from idiomas.udea.edu.co (localhost [127.0.0.1])
04: 	by idiomas.udea.edu.co (Postfix) with ESMTP ID: [ID filtered]
05: 	Tue, 19 Apr 2011 xx:xx:xx -0500 (COT)

Muguphon: +234-803-928-8280 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from e-jct.com (EHLO black.securenet-server.net) [209.51.143.162]
02:   by mx0.gmx.net (mx080) with SMTP; 20 Apr 2011 xx:xx:xx +0200
03: Received: from dhcp17222.myzipnet.com ([41.202.17.222] helo=User)
04: 	by black.securenet-server.net with esmtpa (Exim 4.69)
05: 	(envelope-from <amasama [at] live.com>)
06: 	ID: [ID filtered]

IP: 41.202.17.222 ---> Zipnet-Network, Ghana

header:

01: Received: from omta02.suddenlink.net (omta02-pub.suddenlink.net
02: [208.180.40.74])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 20 Apr 2011 xx:xx:xx +0200 (CEST)
05: Received: from User ([201.67.255.184]) by omta02.suddenlink.net
06:           (InterMail vM.7.09.02.06 201-2219-117-110-20091224) with ESMTP
07:           ID: [ID filtered]
08:           Wed, 20 Apr 2011 xx:xx:xx -0500

IP: 201.67.255.184 ---> Brasil Telecom S/A

Und dieser Mugu kommt mir auch bekannt vor:

header:

01: Received: from mailfilter1.ihug.co.nz (mailfilter1.ihug.co.nz
02: [203.109.136.1])
03: 	by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: X-IronPort-Anti-Spam-Filtered: true
07: X-IronPort-Anti-Spam-Result:
08: AqEMAPr0t03LbYkc/2dsb2JhbACDC4FIkzmNFIFBAYZWK4FoqGxGh0GJF4Epg1B9BJJjV4YegnkCPw
09: X-IronPort-AV: E=Sophos;i="4.64,273,1301832000";
10:    d="scan'208";a="112244625"
11: Received: from out.webmail8.content.vf.net.nz (HELO
12: webmail.vodafone.co.nz) ([203.109.137.28])
13:   by cust.filter1.content.vf.net.nz with ESMTP; 27 Apr 2011 xx:xx:xx +1200
14: Received: from [66.197.235.213] (chr1.dediboxes.co.uk)
15: 	(login=dmVyc2FsQGlodWcuY28ubno=)
16: 	by webmail.vodafone.co.nz (running Vodafone Webmail)
17: 	via TCP with HTTP/1.1
18: 	ID: [ID filtered]
19: 	27 Apr 2011 xx:xx:xx +1200

Als Spam erkannt und trotzdem in die weite Welt gepustet, wie ignorant und inkompetent kann man als Provider eigentlich noch sein.....?

- kjz

Profitable transaction ...

header:
01: Received: from webmail.cto.com.br (localhost [127.0.0.1])
02:     (Authenticated sender: poor [at] spamvictim.tld)
03:     by web02.email.alog.com.br (Postfix) with ESMTPA ID: [ID filtered]
04:     Thu, 28 Apr 2011 xx:xx:xx -0300 (BRT)
05: Received: from 66.171.228.222
06:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
07:         by webmail.cto.com.br with HTTP;
08:         Thu, 28 Apr 2011 xx:xx:xx -0300 (BRT)
09: Message-ID: [ID filtered]
10: Date: Thu, 28 Apr 2011 xx:xx:xx -0300 (BRT)
11: Subject: PROFITABLE TRANSACTION ...  YOUR SINCERITY AND CONFIDENTIALITY
12:      REQUIRED
13: From: "STEPHEN WEBSTER" <webster [at] cto.com.br>
14: Reply-To: talktostevewebster6 [at] live.com
15: User-Agent: SquirrelMail/1.4.5
16: MIME-Version: 1.0
17: Content-Type: multipart/alternative;boundary="----=_20110428181240_38175"
18: Importance: Normal
19: To: undisclosed-recipients:;
20: X-Junkmail-SD-Raw: score=unknown,
21:     refid=str=0001.0A0B020A.4DB9D9B6.0074:SCFSTAT12254023,ss=1,fgs=0,
22:     ip=200.219.210.31,
23:     so=2009-06-02 xx:xx:xx,
24:     dmn=5.7.1/2009-08-27,
25:     mode=single engine
26: Return-Path: webster [at] cto.com.br
Zitat:

I am Stephen Webster,the business Manager Societe Generale Bank United Kingdom.Your sincere partnership is required to enable me transfer some funds(seven million five hundred thousand pounds) to your account for both of us.I am open for negotiation in terms of your percentage so far you put in your utmost attention and sincerity due to the nature of this transaction.I assure all documents to back you up will be provided by me.Please respond to me via email for more details.Please if you are interested do respond back to me via my private email( ) for further information.

Best Regards,
Stephen Webster

Noch etwas aus der Sammlung, wieder mal Account gecrackt:

header:
01: Received: from mailout-afa67.mailout.artfiles.de (EHLO
02: mailout-afa67.mailout.artfiles.de) [212.72.176.67]
03:   by mx0.gmx.net (mx023) with SMTP; 29 Apr 2011 xx:xx:xx +0200
04: Received: from [208.105.137.98] (helo=User)
05: 	auth=webmaster [at] camchat-mv.de
06: 	by mailout.artfiles.de with esmtpa (Exim 4.72)
07: 	ID: [ID filtered]
IP: 208.105.137.98 ---> rrcs-208-105-137-98.nys.biz.rr.com

Muguphon: +44-704 5709041 ---> Open Telecom International Ltd., UK

Für Mugu-Nachschub ist gesorgt:

Mit Schrumm kann ich auch dienen:

header:

01: Received: from hosting.brr.com.br (EHLO hosting.brr.com.br) [201.33.64.15]
02:   by mx0.gmx.net (mx098) with SMTP; 25 Apr 2011 xx:xx:xx +0200
03: Received: from 41-218-232-213-adsl-dyn.4u.com.gh ([41.218.232.213]
04: helo=User)
05: 	by hosting.brr.com.br with esmtpa (Exim 4.69)
06: 	(envelope-from <info [at] live.com>)
07: 	ID: [ID filtered]

die Madrid-Konnektion:

header:

01: Received: from furchet.ice.ru (EHLO communiware2.cust.rinet.ru)
02: [195.91.166.126]
03:   by mx0.gmx.net (mx097) with SMTP; 25 Apr 2011 xx:xx:xx +0200
04: Received: from mail.kazks.kz (mail.auit.ru [195.91.166.116])
05: 	by communiware2.cust.rinet.ru (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon, 25 Apr 2011 xx:xx:xx +0400 (MSD)
07: Received: from [87.223.101.79] (account aaa [at] auit.ru HELO User)
08:   by mail.kazks.kz (CommuniGate Pro SMTP 4.1.8)
09:   with ESMTP ID: [ID filtered]

IP: 87.223.101.79 ---> 79.101.223.87.dynamic.jazztel.es

header:

01: Received: from serverm1.ahfab.biz (ahfabr.lnk.telstra.net [203.45.105.53])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 29 Apr 2011 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.138.165.168]) by serverm1.ahfab.biz with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sat, 30 Apr 2011 xx:xx:xx +1000

IP: 41.138.165.168 ---> Visafone Communications Limited, Nigeria

Muguphon: +44 704 5715390 ---> Open Telecom International Ltd., UK

header:

01: Received: from mail.stronghealthshoes.com (EHLO
02: cjmail.stronghealthshoes.com) [211.148.159.8]
03:   by mx0.gmx.net (mx118) with SMTP; 30 Apr 2011 xx:xx:xx +0200
04: Received: from User ([189.108.230.90] RDNS failed) by
05: cjmail.stronghealthshoes.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sat, 30 Apr 2011 xx:xx:xx +0800

IP: 189.108.230.90 ---> 189-108-230-90.customer.tdatabrasil.net.br

und wieder mal Spamadoo:

header:

01: Received: from smtp7.freeserve.com (EHLO smtp6.freeserve.com) [80.12.242.2]
02:   by mx0.gmx.net (mx104) with SMTP; 30 Apr 2011 xx:xx:xx +0200
03: Received: from me-wanadoo.net (localhost [127.0.0.1])
04: 	by mwinf3j11.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
05: 	Sat, 30 Apr 2011 xx:xx:xx +0200 (CEST)
06: Received: from me-wanadoo.net (localhost [127.0.0.1])
07: 	by mwinf3j11.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
08: 	Sat, 30 Apr 2011 xx:xx:xx +0200 (CEST)
09: Received: from User (unknown [89.192.90.213])
10: 	by mwinf3j11.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
11: 	Sat, 30 Apr 2011 xx:xx:xx +0200 (CEST)

header:

01: Received: from smtp7.freeserve.com (EHLO smtp6.freeserve.com) [80.12.242.2]
02:   by mx0.gmx.net (mx105) with SMTP; 30 Apr 2011 xx:xx:xx +0200
03: Received: from me-wanadoo.net (localhost [127.0.0.1])
04: 	by mwinf3j11.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
05: 	Sat, 30 Apr 2011 xx:xx:xx +0200 (CEST)
06: Received: from me-wanadoo.net (localhost [127.0.0.1])
07: 	by mwinf3j11.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
08: 	Sat, 30 Apr 2011 xx:xx:xx +0200 (CEST)
09: Received: from User (unknown [89.192.90.213])
10: 	by mwinf3j11.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
11: 	Sat, 30 Apr 2011 xx:xx:xx +0200 (CEST)

IP: 89.192.90.213 ---> Orange PCS GPRS services

der Yahoo/ATT-Mugu:

header:

01: Received: from nm6-vm1.access.bullet.mail.mud.yahoo.com (HELO
02: nm6-vm1.access.bullet.mail.mud.yahoo.com) [66.94.237.159]
03:   by mx0.gmx.net (mx039) with SMTP; 01 May 2011 xx:xx:xx +0200
04: Received: from [66.94.237.193] by nm6.access.bullet.mail.mud.yahoo.com
05: with NNFMP; 01 May 2011 xx:xx:xx -0000
06: Received: from [66.94.237.104] by tm4.access.bullet.mail.mud.yahoo.com
07: with NNFMP; 01 May 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1009.access.mail.mud.yahoo.com with
09: NNFMP; 01 May 2011 xx:xx:xx -0000
10: Received: (qmail 98366 invoked from network); 1 May 2011 xx:xx:xx -0000
11: Cc: recipient list not shown: ;
12: Received: from User (ds.2 [at] 41.26.83.100 with login)
13:         by smtp109.sbc.mail.bf1.yahoo.com with SMTP; 01 May 2011
14: xx:xx:xx -0700 PDT

IP: 41.26.83.100 ---> vc-41-26-83-100.umts.vodacom.co.za

Muguphon: + 27-784052935 ---> MTN, SA

der Sternchen-Mugu hat sich gaaaanz viele Rufnummern von den Telefonschw.... ergaunert:

header:

01: Received: from pegasus.rdnoc.com.br (EHLO pegasus.rdnoc.com.br)
02: [201.48.210.2]
03:   by mx0.gmx.net (mx084) with SMTP; 01 May 2011 xx:xx:xx +0200
04: Received: (qmail 74884 invoked from network); 1 May 2011 xx:xx:xx -0300
05: Received: by simscan 1.4.0 ppID: [ID filtered]
06:          scanners: clamav: 0.96/m:52/d:10754
07: Received: from unknown (HELO User)
08: (contabilidade [at] itaudeminas.mg.gov.br@24.220.255.161)
09:   by pegasus.rdnoc.com.br with ESMTPA; 1 May 2011 xx:xx:xx -0300

IP: 24.220.255.161 ---> Midcontinent Media, Inc.

Zitat:

*CONTACT CLAIMS ADMINISTRATOR*
*NAME: Dennis Barrios*

Muguphon: +44 708 646 5033 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44 708 646 5217 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44 701 004 5579 ---> FleXtel Limited, UK

Mugufax: +44 701 989 5999 ---> Skytel Ltd, UK

- kjz

aus meiner Mugu-Kiste, die sich - oh Wunder - wieder etwas leert:

header:

01: Received: from vms174pub.verizon.net (EHLO vms174pub.verizon.net)
02: [206.46.252.174]
03:   by mx0.gmx.net (mx012) with SMTP; 02 May 2011 xx:xx:xx +0200
04: Received: from vms098.mailsrvcs.net ([192.168.1.2])
05:  by vms174.mailsrvcs.net (Sun Java System Messaging Server 6.2-8.01
06: (built Nov
07:  27 2006)) with ESMTPA ID: [ID filtered]
08:  01 May 2011 xx:xx:xx -0500 (CDT)

- kjz

Noch etwas Mugu-Futter:

header:

01: Received: from smtp3web.tin.it (smtp3web.tin.it [212.216.176.237])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  3 May 2011 xx:xx:xx +0200 (CEST)
04: Received: from pswm9.cp.tin.it (192.168.70.30) by smtp3web.tin.it (8.5.132)
05:         ID: [ID filtered]

header:

01: Received: from mail.zhjnc.edu.cn (HELO mail.zhjnc.edu.cn) [202.192.128.99]
02:   by mx0.gmx.net (mx055) with SMTP; 04 May 2011 xx:xx:xx +0200
03: Received: from 64.119.152.203 by mail.zhjnc.edu.cn([202.192.128.99]) with SMTP
04: ID: [ID filtered]

header:

01: Received: from mail.zhjnc.edu.cn (HELO mail.zhjnc.edu.cn) [202.192.128.99]
02: by mx0.gmx.net (mx036) with SMTP; 04 May 2011 xx:xx:xx +0200
03: Received: from 64.119.152.203 by mail.zhjnc.edu.cn([202.192.128.99]) with SMTP
04: ID: [ID filtered]

header:

01: Received: from mail.zhjnc.edu.cn (mail.zhjnc.edu.cn [202.192.128.99])
02: by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)
03: ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from 64.119.152.203 by mail.zhjnc.edu.cn([202.192.128.99]) with SMTP
06: ID: [ID filtered]

IP: 202.192.128.99 ---> Towerstream I, Inc.

Muguphon: +44-702 402 2921 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from nm1-vm1.bullet.mail.sp2.yahoo.com
02: (nm1-vm1.bullet.mail.sp2.yahoo.com [98.139.91.203])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat,  7 May 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.91.70] by nm1.bullet.mail.sp2.yahoo.com with
06: NNFMP; 06 May 2011 xx:xx:xx -0000
07: Received: from [98.139.91.9] by tm10.bullet.mail.sp2.yahoo.com with
08: NNFMP; 06 May 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1009.mail.sp2.yahoo.com with NNFMP; 06
10: May 2011 xx:xx:xx -0000
11: X-Yahoo-Newman-ID: [ID filtered]
12: Received: (qmail 61055 invoked from network); 6 May 2011 xx:xx:xx -0000
13: Received: from User (peter [at] 41.14.160.253 with login)
14:         by smtp113.biz.mail.sp1.yahoo.com with SMTP; 06 May 2011
15: xx:xx:xx -0700 PDT

IP: 41.14.160.253 ---> vc-41-14-160-253.umts.vodacom.co.za

- kjz

Die Kiste möchten gerne noch füllen:

der Sternchen-Mugu:

header:

01: Received: from mail06.o2online.de (EHLO mail06.o2online.de) [82.113.101.34]
02:   by mx0.gmx.net (mx037) with SMTP; 11 May 2011 xx:xx:xx +0200
03: Received: from User (cpe-67-250-119-4.hvc.res.rr.com [67.250.119.4])
04: 	(authenticated bits=0)
05: 	by mail06.o2online.de (8.12.11.20060308/8.12.11) with ESMTP id
06: p4BIKPUi017371;
07: 	Wed, 11 May 2011 xx:xx:xx +0200

Zitat:

*DR. STEVEN ADAM*
*Product Sourcing Manager*
**
*Ivix Pharmaceutical Consultancy IPC*

header:

01: Received: from elasmtp-mealy.atl.sa.earthlink.net
02: (elasmtp-mealy.atl.sa.earthlink.net [209.86.89.69])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 11 May 2011 xx:xx:xx +0200 (CEST)
05: Received: from [41.125.1.173] (helo=User)
06: 	by elasmtp-mealy.atl.sa.earthlink.net with esmtpa (Exim 4.67)
07: 	(envelope-from <e11 [at] mail.com>)
08: 	ID: [ID filtered]

IP: 41.125.1.173 ---> MTN Business, ZA

header:

01: Received: from mail.mobiset.de (mail.mobiset.de [213.23.37.90])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 15 May 2011 xx:xx:xx +0200 (CEST)
04: Received: from User ([82.128.81.106]) by mail.mobiset.de with Microsoft
05: SMTPSVC(6.0.3790.4675);
06: 	 Fri, 13 May 2011 xx:xx:xx +0200

IP: 82.128.81.106 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from mail.vtz.net (EHLO mail.vtz.net) [62.2.100.130]
02:   by mx0.gmx.net (mx051) with SMTP; 15 May 2011 xx:xx:xx +0200
03: Received: from User ([83.71.159.165])
04:         by mail.vtz.net (Merak 8.0.3) with ASMTP ID: [ID filtered]
05:         Sun, 15 May 2011 xx:xx:xx +0200

IP: 83.71.159.165 ---> 83-71-159-165.customer.eircom.net

header:

01: Received: from mail.apmobile.com (114-32-175-23.HINET-IP.hinet.net
02: [114.32.175.23])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 15 May 2011 xx:xx:xx +0200 (CEST)
05: Received: from User (210-70-172-217.cjcu.edu.tw [210.70.172.217])
06: 	by mail.apmobile.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Sun, 15 May 2011 xx:xx:xx +0800

- kjz

Da war doch noch was:

header:

01: Received: from maruga.smvmail2.com (correo.smvmail3.com [217.130.28.37])
02: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: (qmail 20692 invoked from network); 9 May 2011 xx:xx:xx +0200
06: Received: from unknown (HELO User) (202.102.72.59)
07:   by correo.smvmail3.com with SMTP; 9 May 2011 xx:xx:xx +0200

IP: 202.102.72.59 ---> CHINANET jiangsu

header:

01: Received: from internet.joaopessoa.pb.gov.br (EHLO
02: mail.joaopessoa.pb.gov.br) [201.18.173.201]
03:   by mx0.gmx.net (mx037) with SMTP; 12 May 2011 xx:xx:xx +0200
04: Received: from joaopessoa.pb.gov.br (localhost [127.0.0.1])
05: 	by mail.joaopessoa.pb.gov.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu, 12 May 2011 xx:xx:xx -0300 (BRT)

header:

01: Received: from internet.joaopessoa.pb.gov.br (EHLO
02: mail.joaopessoa.pb.gov.br) [201.18.173.201]
03:   by mx0.gmx.net (mx037) with SMTP; 12 May 2011 xx:xx:xx +0200
04: Received: from joaopessoa.pb.gov.br (localhost [127.0.0.1])
05: 	by mail.joaopessoa.pb.gov.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu, 12 May 2011 xx:xx:xx -0300 (BRT)

Muguphon: +2348182870817 ---> Nigeria

header:

01: Received: from 210-241-4-130.HINET-IP.hinet.net (EHLO
02: imail.ilcpb.gov.tw) [210.241.4.130]
03:   by mx0.gmx.net (mx112) with SMTP; 13 May 2011 xx:xx:xx +0200
04: Received: from imail.ilcpb.gov.tw (localhost [127.0.0.1])
05: 	by imail.ilcpb.gov.tw (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 13 May 2011 xx:xx:xx +0800 (CST)

header:

01: Received: from 210-241-4-130.HINET-IP.hinet.net (EHLO
02: imail.ilcpb.gov.tw) [210.241.4.130]
03:   by mx0.gmx.net (mx056) with SMTP; 13 May 2011 xx:xx:xx +0200
04: Received: from imail.ilcpb.gov.tw (localhost [127.0.0.1])
05: 	by imail.ilcpb.gov.tw (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 13 May 2011 xx:xx:xx +0800 (CST)

X-OriginatingIP: 41.203.64.252 (lin5831) ---> GLO-Mobile Network Services, Nigeria

- kjz

Aus der Mugu-Kiste:

header:

01: Received: from nm18-vm1.bullet.mail.bf1.yahoo.com
02: (nm18-vm1.bullet.mail.bf1.yahoo.com [98.139.213.145])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Mon, 16 May 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.212.148] by nm18.bullet.mail.bf1.yahoo.com with
06: NNFMP; 16 May 2011 xx:xx:xx -0000
07: Received: from [98.139.212.248] by tm5.bullet.mail.bf1.yahoo.com with
08: NNFMP; 16 May 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1057.mail.bf1.yahoo.com with NNFMP; 16
10: May 2011 xx:xx:xx -0000
11: X-Yahoo-Newman-ID: [ID filtered]
12: Received: (qmail 25513 invoked from network); 16 May 2011 xx:xx:xx -0000
13: Cc: recipient list not shown: ;
14: Message-ID: [ID filtered]
15: Received: from User (michelle [at] 82.128.0.79 with login)
16:         by smtp102.biz.mail.bf1.yahoo.com with SMTP; 16 May 2011
17: xx:xx:xx -0700 PDT

IP: 82.128.0.79 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +234 813-804-8639 ---> Nigeria

header:

01: Received: from nm18-vm1.bullet.mail.bf1.yahoo.com
02: (nm18-vm1.bullet.mail.bf1.yahoo.com [98.139.213.145])
03: 	by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from [98.139.212.152] by nm18.bullet.mail.bf1.yahoo.com with
07: NNFMP; 18 May 2011 xx:xx:xx -0000
08: Received: from [98.139.212.225] by tm9.bullet.mail.bf1.yahoo.com with
09: NNFMP; 18 May 2011 xx:xx:xx -0000
10: Received: from [127.0.0.1] by omp1034.mail.bf1.yahoo.com with NNFMP; 18
11: May 2011 xx:xx:xx -0000
12: Received: from User (loan [at] 66.177.250.210 with login)
13:         by smtp101.biz.mail.bf1.yahoo.com with SMTP; 17 May 2011
14: xx:xx:xx -0700 PDT

header:

01: Received: from nm30-vm1.bullet.mail.bf1.yahoo.com (HELO
02: nm30-vm1.bullet.mail.bf1.yahoo.com) [98.139.213.54]
03:   by mx0.gmx.net (mx079) with SMTP; 18 May 2011 xx:xx:xx +0200
04: Received: from [98.139.212.144] by nm30.bullet.mail.bf1.yahoo.com with
05: NNFMP; 18 May 2011 xx:xx:xx -0000
06: Received: from [98.139.212.230] by tm1.bullet.mail.bf1.yahoo.com with
07: NNFMP; 18 May 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1039.mail.bf1.yahoo.com with NNFMP; 18
09: May 2011 xx:xx:xx -0000
10: Received: from User (loan [at] 66.177.250.210 with login)
11:         by smtp101.biz.mail.bf1.yahoo.com with SMTP; 17 May 2011
12: xx:xx:xx -0700 PDT

header:

01: Received: from nm24-vm1.bullet.mail.bf1.yahoo.com (HELO
02: nm24-vm1.bullet.mail.bf1.yahoo.com) [98.139.213.134]
03:   by mx0.gmx.net (mx074) with SMTP; 18 May 2011 xx:xx:xx +0200
04: Received: from [98.139.212.148] by nm24.bullet.mail.bf1.yahoo.com with
05: NNFMP; 18 May 2011 xx:xx:xx -0000
06: Received: from [98.139.212.243] by tm5.bullet.mail.bf1.yahoo.com with
07: NNFMP; 18 May 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1052.mail.bf1.yahoo.com with NNFMP; 18
09: May 2011 xx:xx:xx -0000
10: X-Yahoo-Newman-ID: [ID filtered]
11: Received: (qmail 21579 invoked from network); 18 May 2011 xx:xx:xx -0000
12: Received: from User (loan [at] 66.177.250.210 with login)
13:         by smtp101.biz.mail.bf1.yahoo.com with SMTP; 17 May 2011
14: xx:xx:xx -0700 PDT

IP: 66.177.250.210 ---> c-66-177-250-210.hsd1.fl.comcast.net

Muguphon: +44 702 4020757 ---> Magrathea Telecommunications Limited, UK

Mugufax: +44 871 5038336 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from nm16-vm0.bullet.mail.ird.yahoo.com
02: (nm16-vm0.bullet.mail.ird.yahoo.com [77.238.189.192])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 18 May 2011 xx:xx:xx +0200 (CEST)
05: Received: from [77.238.189.234] by nm16.bullet.mail.ird.yahoo.com with
06: NNFMP; 18 May 2011 xx:xx:xx -0000
07: Received: from [212.82.108.245] by tm15.bullet.mail.ird.yahoo.com with
08: NNFMP; 18 May 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1010.mail.ird.yahoo.com with NNFMP; 18
10: May 2011 xx:xx:xx -0000
11: Received: (qmail 54991 invoked by UID: [UID filtered]
12: Received: from [41.203.234.86] by web24609.mail.ird.yahoo.com via HTTP;
13: Wed, 18 May 2011 xx:xx:xx BST

IP: 41.203.234.8 ---> POOL ADSL ONATEL, BF

header:

01: Received: from 173-163-176-222-cpennsylvania2.hfc.comcastbusiness.net
02: (EHLO server1.dcomputers.net) [173.163.176.222]
03:   by mx0.gmx.net (mx070) with SMTP; 19 May 2011 xx:xx:xx +0200
04: Received: from User (localhost.localdomain [127.0.0.1])
05: 	by server1.dcomputers.net (Postfix) with SMTP ID: [ID filtered]
06: 	Wed, 18 May 2011 xx:xx:xx -0400 (EDT)

Muguphon: +44 702 409 9148 ---> Magrathea Telecommunications Limited, UK

Mugufax: +44 121 210 0239 ---> Verizon UK Ltd

header:

01: Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.191])
02: 	by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from me-wanadoo.net (localhost [127.0.0.1])
06: 	by mwinf3608.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
07: 	Thu, 19 May 2011 xx:xx:xx +0200 (CEST)
08: Received: from me-wanadoo.net (localhost [127.0.0.1])
09: 	by mwinf3608.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
10: 	Thu, 19 May 2011 xx:xx:xx +0200 (CEST)
11: Received: from User (unknown [109.180.79.17])
12: 	by mwinf3608.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
13: 	Thu, 19 May 2011 xx:xx:xx +0200 (CEST)

IP: 109.180.79.17 ---> Orange GPRS Service

header:

01: Received: from mail1.mgccc.edu (mail1.mgccc.edu [216.79.147.173])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 19 May 2011 xx:xx:xx +0200 (CEST)
04: X-IronPort-Anti-Spam-Filtered: true
05: X-IronPort-Anti-Spam-Result:
06: AoQdAAnU1E2sGQwU/2dsb2JhbACWVwGOXYFSWxqFXwGCFAGgRZ8lgy6CawSGUJIMhkiBPQ
07: X-IronPort-AV: E=Sophos;i="4.65,236,1304312400";
08:    d="scan'208";a="4718434"
09: Received: from mgcccmail.mgccc.cc.ms.us ([172.25.12.20])
10:   by mail1.mgccc.edu with ESMTP; 19 May 2011 xx:xx:xx -0500

header:

01: Received: from linhui2.at-tep.com (61-91-248-164.static.asianet.co.th
02: [61.91.248.164])
03: 	by mx.kundenserver.de (node=mxbap2) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: Received: from webmail.at-tep.com (localhost [127.0.0.1])
06: 	by linhui2.at-tep.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Fri, 20 May 2011 xx:xx:xx +0700 (ICT)

- kjz

Die Kiste war noch nicht leer:

header:

01: Received: from smtp1web.tin.it (smtp1web.tin.it [212.216.176.195])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 17 May 2011 xx:xx:xx +0200 (CEST)
04: Received: from pswm11.cp.tin.it (192.168.70.35) by smtp1web.tin.it (8.5.132)
05:         ID: [ID filtered]

Und mal wieder ein Uni-Account gecrackt:

header:

01: Received: from webmail02.unifal-mg.edu.br (EHLO
02: webmail02.unifal-mg.edu.br) [200.131.224.99]
03:   by mx0.gmx.net (mx069) with SMTP; 20 May 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by webmail02.unifal-mg.edu.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 20 May 2011 xx:xx:xx -0300 (BRT)
07: X-Virus-Scanned: amavisd-new at unifal-mg.edu.br
08: Received: from webmail02.unifal-mg.edu.br ([127.0.0.1])
09: 	by localhost (webmail02.unifal-mg.edu.br [127.0.0.1]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from webmail02.unifal-mg.edu.br (webmail02.unifal-mg.edu.br
13: [127.0.1.1])
14: 	by webmail02.unifal-mg.edu.br (Postfix) with ESMTP ID: [ID filtered]
15: 	Fri, 20 May 2011 xx:xx:xx -0300 (BRT)

X-Originating-IP: [41.138.179.50] ---> Visafone Communications Limited, Nigeria

header:

01: Received: from mail3.contato.net (EHLO mail3.contato.net) [201.76.0.19]
02:   by mx0.gmx.net (mx075) with SMTP; 21 May 2011 xx:xx:xx +0200
03: Received: (qmail 31420 invoked by UID: [UID filtered]
04: Received: by simscan 1.4.0 ppID: [ID filtered]
05:          scanners:none
06: Received: from static-217-77-220-165.wildpark.net (HELO User)
07: (jessica [at] 217.77.220.165)
08:   by mail3.contato.net with ESMTPA; 20 May 2011 xx:xx:xx -0300

header:

01: Received: from scglobalinvestment.com (EHLO scglobalinvestment.com)
02: [173.0.56.73]
03:   by mx0.gmx.net (mx033) with SMTP; 21 May 2011 xx:xx:xx +0200
04: Received: from win-4db731f436e (ppp-124-120-131-133.revip2.asianet.co.th
05: [124.120.131.133])
06: 	by scglobalinvestment.com (Postfix) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Sat, 21 May 2011 xx:xx:xx +0400 (MSD)

die Madrid-Konnektion mit dem Sternchen-Mugu:

header:

01: Received: from moj-kafic.hr (EHLO hosting.h-1.hr) [80.80.50.38]
02:   by mx0.gmx.net (mx081) with SMTP; 22 May 2011 xx:xx:xx +0200
03: Received: from User (unknown [90.170.106.129])
04: 	by hosting.h-1.hr (Postfix) with ESMTPA ID: [ID filtered]
05: 	Sat, 21 May 2011 xx:xx:xx +0200 (CEST)

IP: 90.170.106.129 ---> France Telecom Espana SA

Zitat:

*Regards,*
*Mr Wong Tang.*

- kjz

header:
01: Received: from pswm11.cp.tin.it (192.168.70.35) by smtp1web.tin.it (8.5.132)
02:         ID: [ID filtered]
03: Message-ID: [ID filtered]
04: Date: Sat, 21 May 2011 xx:xx:xx +0200 (CEST)
05: From: REV DR JOHN UGO <revdrjohnugo04 [at] virgilio.it>
06: Reply-To: rev.drjohnugo [at] virgilio.it
07: Subject:                         RE
08: Mime-Version: 1.0
09: Content-Type: text/plain;charset="UTF-8"
10: Content-Transfer-Encoding: 7bit
11: X-Originating-IP: 82.128.1.23
12: X-Junkmail-SD-Raw: score=unknown,
13:     refid=str=0001.0A0B020B.4DD71815.006E,ss=1,fgs=0,
14:     ip=212.216.176.195,
15:     so=2009-06-02 xx:xx:xx,
16:     dmn=5.7.1/2009-08-27,
17:     mode=single engine
18: Bcc:
19: Return-Path: revdrjohnugo04 [at] virgilio.it
Zitat:

RE
Did you authorize Mrs.Janet Hans from USA to receive
your $5.5M,
because she came to the Bank today, telling us that you sent her,
to inherit
your fund. please get back to us immediately with your contact
Details as
follows, your (1) Name (2)Address (3)Phone(4)ID.for confirmation.
REPLY via E-MAIL()
REV DR JOHN UGO (C.B.N)

IP: 82.128.1.23 = Multilinks Telecommunications Limited, Lagos/Nigeria

Eniac

Dann wollen wir wieder mal:

header:

01: Received: from mail.eioltd.com.tw (EHLO eioltd.com.tw) [59.125.46.226]
02:   by mx0.gmx.net (mx016) with SMTP; 24 May 2011 xx:xx:xx +0200
03: Received: from User ([216.240.146.201])
04: 	by eioltd.com.tw ([192.168.1.1])
05: 	with SMTP (MDaemon.PRO.v6.0.3.R);
06: 	Mon, 23 May 2011 xx:xx:xx +0800

header:

01: Received: from moh2-ve3.go2.pl (moh2-ve3.go2.pl [193.17.41.208])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 25 May 2011 xx:xx:xx +0200 (CEST)
04: Received: from moh2-ve3.go2.pl (unknown [10.0.0.208])
05: 	by moh2-ve3.go2.pl (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed, 25 May 2011 xx:xx:xx +0200 (CEST)
07: Received: from unknown (unknown [10.0.0.142])
08: 	by moh2-ve3.go2.pl (Postfix) with SMTP
09: 	for xxxxx; Wed, 25 May 2011 xx:xx:xx +0200 (CEST)
10: Received: from dns-failure [70.39.119.77]
11: 	by poczta.o2.pl with ESMTP ID: [ID filtered]
12: 	Wed, 25 May 2011 xx:xx:xx +0200

IP: 70.39.119.77 ---> SHARKTECH

Muguphon: +234 8074938857 ---> Globacom Ltd, Nigeria

header:

01: Received: from tdtv.tinp.net.tw (EHLO tdtv.tinp.net.tw) [58.99.32.32]
02:   by mx0.gmx.net (mx057) with SMTP; 25 May 2011 xx:xx:xx +0200
03: Received: by tdtv.tinp.net.tw (Postfix, from userID: [ID filtered]
04: 	ID: [ID filtered]
05: X-Spam-Flag: YES
06: X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on tdtv.tinp.net.tw
07: X-Spam-Level: *******************
08: X-Spam-Status: Yes, score=19.3 required=11.0 tests=DATE_IN_PAST_96_XX,
09: 	DNS_FROM_OPENWHOIS,FH_DATE_PAST_20XX,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,
10: 	FORGED_OUTLOOK_TAGS,HTML_MESSAGE,MIME_HTML_ONLY,MSOE_MID_WRONG_CASE,
11: 	RCVD_IN_PBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_NONE autolearn=failed
12: 	version=3.2.4
13: X-Spam-Report:
14: 	*  2.4 DNS_FROM_OPENWHOIS RBL: Envelope sender listed in bl.open-whois.org.
15: 	*  3.4 FH_DATE_PAST_20XX The date is grossly in the future.
16: 	*  2.3 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date
17: 	*  0.0 HTML_MESSAGE BODY: HTML included in message
18: 	*  1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
19: 	*  2.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
20: 	*      [115.241.146.219 listed in zen.spamhaus.org]
21: 	*  0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
22: 	*  1.1 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
23: 	*      [115.241.146.219 listed in dnsbl.sorbs.net]
24: 	*  0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
25: 	*  0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
26: 	*  0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
27: 	*  0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
28: 	*  4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
29: Received: from User (unknown [115.241.146.219])
30: 	by tdtv.tinp.net.tw (Postfix) with ESMTP ID: [ID filtered]
31: 	Wed, 25 May 2011 xx:xx:xx +0800 (CST)

header:

01: Received: from tdtv.tinp.net.tw (EHLO tdtv.tinp.net.tw) [58.99.32.32]
02:   by mx0.gmx.net (mx022) with SMTP; 25 May 2011 xx:xx:xx +0200
03: Received: by tdtv.tinp.net.tw (Postfix, from userID: [ID filtered]
04: 	ID: [ID filtered]
05: X-Spam-Flag: YES
06: X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on tdtv.tinp.net.tw
07: X-Spam-Level: *******************
08: X-Spam-Status: Yes, score=19.3 required=11.0 tests=DATE_IN_PAST_96_XX,
09: 	DNS_FROM_OPENWHOIS,FH_DATE_PAST_20XX,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,
10: 	FORGED_OUTLOOK_TAGS,HTML_MESSAGE,MIME_HTML_ONLY,MSOE_MID_WRONG_CASE,
11: 	RCVD_IN_PBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_NONE autolearn=failed
12: 	version=3.2.4
13: X-Spam-Report:
14: 	*  2.4 DNS_FROM_OPENWHOIS RBL: Envelope sender listed in bl.open-whois.org.
15: 	*  3.4 FH_DATE_PAST_20XX The date is grossly in the future.
16: 	*  2.3 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date
17: 	*  0.0 HTML_MESSAGE BODY: HTML included in message
18: 	*  1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
19: 	*  2.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
20: 	*      [115.241.146.219 listed in zen.spamhaus.org]
21: 	*  0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
22: 	*  1.1 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
23: 	*      [115.241.146.219 listed in dnsbl.sorbs.net]
24: 	*  0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
25: 	*  0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
26: 	*  0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
27: 	*  0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
28: 	*  4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
29: Received: from User (unknown [115.241.146.219])
30: 	by tdtv.tinp.net.tw (Postfix) with ESMTP ID: [ID filtered]
31: 	Wed, 25 May 2011 xx:xx:xx +0800 (CST)

IP: 115.241.146.219 ---> Reliance Communication Ltd.

- kjz

Und weiter geht's:

der ATT/Yahoo-Mugu:

header:

01: Received: from nm19-vm1.access.bullet.mail.mud.yahoo.com
02: (nm19-vm1.access.bullet.mail.mud.yahoo.com [66.94.236.26])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Mon, 23 May 2011 xx:xx:xx +0200 (CEST)
05: Received: from [66.94.237.127] by nm19.access.bullet.mail.mud.yahoo.com
06: with NNFMP; 23 May 2011 xx:xx:xx -0000
07: Received: from [66.94.237.105] by tm2.access.bullet.mail.mud.yahoo.com
08: with NNFMP; 23 May 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1010.access.mail.mud.yahoo.com with
10: NNFMP; 23 May 2011 xx:xx:xx -0000
11: Received: from [98.138.82.36] by web181603.mail.ne1.yahoo.com via HTTP;
12: Mon, 23 May 2011 xx:xx:xx PDT

X-RocketYMMF:

header:

01: Received: from mailrelay.embarq.synacor.com (EHLO
02: mailrelay.embarq.synacor.com) [208.47.184.3]
03:   by mx0.gmx.net (mx039) with SMTP; 23 May 2011 xx:xx:xx +0200
04: Authentication-Results:  smtp04.embarq.synacor.com
05: smtp.user=ncad [at] embarqmail.com; auth=pass (LOGIN)
06: Received: from [98.255.196.232] ([98.255.196.232:58499] helo=User)
07: 	by mailrelay.embarq.synacor.com (envelope-from <mrsfaridawaziri [at] efcc.org>)
08: 	(ecelerity 2.2.2.40 r(29895/29896)) with ESMTPA
09: 	ID: [ID filtered]

IP: 98.255.196.232 ---> c-98-255-196-232.hsd1.ca.comcast.net

Und wieder der ATT/Yahoo-Mugu:

header:

01: Received: from nm14-vm1.access.bullet.mail.sp2.yahoo.com
02: (nm14-vm1.access.bullet.mail.sp2.yahoo.com [98.139.44.163])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 26 May 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.44.106] by nm14.access.bullet.mail.sp2.yahoo.com
06: with NNFMP; 26 May 2011 xx:xx:xx -0000
07: Received: from [98.139.44.89] by tm11.access.bullet.mail.sp2.yahoo.com
08: with NNFMP; 26 May 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1026.access.mail.sp2.yahoo.com with
10: NNFMP; 26 May 2011 xx:xx:xx -0000
11: Received: from [98.138.82.36] by web181505.mail.ne1.yahoo.com via HTTP;
12: Thu, 26 May 2011 xx:xx:xx PDT

X-RocketYMMF:

header:

01: Received: from nm3-vm1.bullet.mail.bf1.yahoo.com (HELO
02: nm3-vm1.bullet.mail.bf1.yahoo.com) [98.139.213.167]
03:   by mx0.gmx.net (mx055) with SMTP; 26 May 2011 xx:xx:xx +0200
04: Received: from [98.139.212.146] by nm3.bullet.mail.bf1.yahoo.com with
05: NNFMP; 26 May 2011 xx:xx:xx -0000
06: Received: from [98.139.221.61] by tm3.bullet.mail.bf1.yahoo.com with
07: NNFMP; 26 May 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by smtp102.biz.mail.bf1.yahoo.com with NNFMP;
09: 26 May 2011 xx:xx:xx -0000
10: Received: from User (mjkpreston [at] 82.128.83.144 with login)
11:         by smtp102.biz.mail.bf1.yahoo.com with SMTP; 26 May 2011
12: xx:xx:xx -0700 PDT

IP: 82.128.83.144 ---> Multilinks Telecommunications Limited, Nigeria

die Madrid-Konnektion:

header:

01: Received: from host66.canaca.com (EHLO host66.canaca.com) [66.49.132.208]
02:   by mx0.gmx.net (mx062) with SMTP; 27 May 2011 xx:xx:xx +0200
03: Received: from [77.209.252.249] (helo=User)
04: 	by host66.canaca.com with esmtpa (Exim 4.69)
05: 	(envelope-from <laminhelen1 [at] luckymail.com>)
06: 	ID: [ID filtered]

IP: 77.209.252.249 ---> VODAFONE_SPAIN_NETWORK

header:

01: Received: from nm8-vm1.bullet.mail.ac4.yahoo.com (HELO
02: nm8-vm1.bullet.mail.ac4.yahoo.com) [98.139.52.231]
03:   by mx0.gmx.net (mx095) with SMTP; 28 May 2011 xx:xx:xx +0200
04: Received: from [98.139.52.192] by nm8.bullet.mail.ac4.yahoo.com with
05: NNFMP; 28 May 2011 xx:xx:xx -0000
06: Received: from [98.139.221.43] by tm5.bullet.mail.ac4.yahoo.com with
07: NNFMP; 28 May 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by smtp105.biz.mail.bf1.yahoo.com with NNFMP;
09: 28 May 2011 xx:xx:xx -0000
10: Received: from User (atapeter206 [at] 41.202.16.185 with login)
11:         by smtp105.biz.mail.bf1.yahoo.com with SMTP; 28 May 2011
12: xx:xx:xx -0700 PDT

IP: 41.202.16.185 ---> Broadband Home Ltd., GH

header:

01: Received: from mail.une.net.co (EHLO une-pmta04.une.net.co) [200.13.249.119]
02:   by mx0.gmx.net (mx053) with SMTP; 29 May 2011 xx:xx:xx +0200
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by une-pmta04.une.net.co (Postfix) with ESMTP ID: [ID filtered]
05: 	Sat, 28 May 2011 xx:xx:xx -0500 (COT)
06: X-Virus-Scanned: amavisd-new at une-pmta04.une.net.co
07: Received: from une-pmta04.une.net.co ([127.0.0.1])
08: 	by localhost (une-pmta04.une.net.co [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from [172.36.55.148] (unknown [41.203.64.253])
11: 	by une-pmta04.une.net.co (Postfix) with ESMTPA ID: [ID filtered]
12: 	Sat, 28 May 2011 xx:xx:xx -0500 (COT)

IP: 41.203.64.253 ---> GLO-Mobile Network Services, Nigeria

- kjz

Zur Komplettierung der Sammlung:

header:

01: Received: from ms1.maruzen-chem.co.jp (ms1.maruzen-chem.co.jp
02: [210.238.233.27])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed,  1 Jun 2011 xx:xx:xx +0200 (CEST)
05: Received: from User ([116.203.40.40]) by ms1.maruzen-chem.co.jp with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Wed, 1 Jun 2011 xx:xx:xx +0900

IP: 116.203.40.40 ---> MTSINDIA-IN

Muguphon: +44 701 745 0078 ---> FleXtel Limited, UK

- kjz

Die 'zweitgrößte Industrie Nigerias' meldet sich natürlich weter zu Wort:

header:

01: Received: from mvb2000.localdomain ([218.107.220.20])
02: 	by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200  
05: Received: from User (unknown [180.89.128.134])
06: 	by mvb2000.localdomain (Postfix) with ESMTP ID: [ID filtered]
07: 	Fri,  3 Jun 2011 xx:xx:xx +0800 (CST)

header:

01: Received: from unknown (EHLO mvb2000.localdomain) [218.107.220.20]
02:   by mx0.gmx.net (mx109) with SMTP; 03 Jun 2011 xx:xx:xx +0200
03: Received: from User (unknown [180.89.128.134])
04: 	by mvb2000.localdomain (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri,  3 Jun 2011 xx:xx:xx +0800 (CST)

header:

01: Received: from srv.toninhas.com.br
02: (189-20-228-26.customer.tdatabrasil.net.br [189.20.228.26])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200

header:

01: Received: from 189-20-228-26.customer.tdatabrasil.net.br (EHLO
02: srv.toninhas.com.br) [189.20.228.26]
03:   by mx0.gmx.net (mx091) with SMTP; 03 Jun 2011 xx:xx:xx +0200
04: X-Virus-Scanned: by BluePex IE at toninhas.com.br
05: Received: from User ([180.89.132.240])
06: 	(authenticated bits=0)
07: 	by srv.toninhas.com.br (8.13.8/8.13.1) with ESMTP ID: [ID filtered]
08: 	Fri, 3 Jun 2011 xx:xx:xx -0300

header:

01: Received: from 189-20-228-26.customer.tdatabrasil.net.br (EHLO
02: srv.toninhas.com.br) [189.20.228.26]
03:   by mx0.gmx.net (mx091) with SMTP; 03 Jun 2011 xx:xx:xx +0200
04: X-Virus-Scanned: by BluePex IE at toninhas.com.br
05: Received: from User ([180.89.132.240])
06: 	(authenticated bits=0)
07: 	by srv.toninhas.com.br (8.13.8/8.13.1) with ESMTP ID: [ID filtered]
08: 	Fri, 3 Jun 2011 xx:xx:xx -0300

IP: 180.89.128.134 ---> China Unicom Guangdong

header:

01: Received: from mail.lenox.k12.ia.us (cipafilter.lenox.k12.ia.us
02: [207.28.34.73])
03: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
04: 	for xxxxx; Fri,  3 Jun 2011 xx:xx:xx -0400 (EDT)
05: Received: from [92.251.245.110] ([92.251.245.110])
06: 	by mail.lenox.k12.ia.us (Kerio MailServer 6.7.2);
07: 	Fri, 3 Jun 2011 xx:xx:xx -0500

IP: 92.251.245.110 ---> 92.251.245.110.threembb.ie

header:

01: Received: from bluespirit.rudnix.com (bluespirit1.rudnix.com
02: [91.185.205.34])
03: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
04: 	for xxxxx; Sat,  4 Jun 2011 xx:xx:xx -0400 (EDT)
05: Received: from ml82.128.3.236.multilinks.com ([82.128.3.236] helo=User)
06: 	by bluespirit.rudnix.com with esmtpsa (TLSv1:AES256-SHA:256)
07: 	(Exim 4.69)
08: 	(envelope-from <igor.kristl [at] ffl.si>)
09: 	ID: [ID filtered]

Muguphon: +234 8084105448 ---> Celtel Nigeria Limited/Zain

- kjz

Kleine, aber feine Mugu-Sammlung:

header:

01: Received: from ms.ger-s.com.tw (ms.ger-s.com.tw [59.127.130.6])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 10 Jun 2011 xx:xx:xx +0200 (CEST)
04: Received: from User [64.31.55.131] by ms.ger-s.com.tw with ESMTP
05:   (SMTPD-8.22) ID: [ID filtered]

IP: 64.31.55.131 ---> 131-55-31-64.static.reverse.lstn.net

Muguphon: +44 (704) 5724751 ---> Open Telecom International Ltd., UK

der Yahoo/ATT-Mugu:

header:

01: Received: from nm27-vm0.access.bullet.mail.sp2.yahoo.com
02: (nm27-vm0.access.bullet.mail.sp2.yahoo.com [98.139.44.188])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 12 Jun 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.44.98] by nm27.access.bullet.mail.sp2.yahoo.com
06: with NNFMP; 11 Jun 2011 xx:xx:xx -0000
07: Received: from [98.139.44.90] by tm3.access.bullet.mail.sp2.yahoo.com
08: with NNFMP; 11 Jun 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1027.access.mail.sp2.yahoo.com with
10: NNFMP; 11 Jun 2011 xx:xx:xx -0000
11: Received: (qmail 69288 invoked by UID: [UID filtered]
12: Received: from [98.138.82.34] by web181113.mail.ne1.yahoo.com via HTTP;
13: Sat, 11 Jun 2011 xx:xx:xx PDT

IP: 98.138.82.34 ---> mg003.access.mail.ne1.yahoo.com

X-RocketYMMF:

Muguphon: +27-78-268-5631 ---> MTN, ZA

header:

01: Received: from mail.netronixcorp.com (mail.netronixcorp.com [209.125.88.18])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 13 Jun 2011 xx:xx:xx +0200 (CEST)
04: Received: from User ([119.196.18.1]) by mail.netronixcorp.com
05: 	with SMTP (Code-Crafters Ability Mail Server 2.72);
06: 	Sun, 12 Jun 2011 xx:xx:xx -0500

IP: 119.196.18.1 ---> Kornet, KR

- kjz

In der Sammlung möchte sich auch noch verewigen:

header:

01: Received: from CPE-121-212-235-222.static.nsw.bigpond.net.au (EHLO
02: midasgroup.com.au) [121.212.235.222]
03:   by mx0.gmx.net (mx082) with SMTP; 06 Jun 2011 xx:xx:xx +0200
04: Received: from User ([41.66.237.234]) by midasgroup.com.au with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Fri, 3 Jun 2011 xx:xx:xx +1000

IP: 41.66.237.234 ---> Ghana Telecommunications Company Limited

- kjz

Tja, die Mugus sind (glücklichweise) auch nicht mehr das, was sie mal waren:

header:

01: Received: from mail.netronixcorp.com (mail.netronixcorp.com [209.125.88.18])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 13 Jun 2011 xx:xx:xx +0200 (CEST)
04: Received: from User ([119.196.18.1]) by mail.netronixcorp.com
05: 	with SMTP (Code-Crafters Ability Mail Server 2.72);
06: 	Sun, 12 Jun 2011 xx:xx:xx -0500

IP: 119.196.18.1 ---> Kornet, KR

Und die Vlads:

header:

01: Received: from ns.n-soft.net (EHLO ns.n-soft.net) [93.119.175.254]
02:   by mx0.gmx.net (mx063) with SMTP; 17 Jun 2011 xx:xx:xx +0200
03: Received: from [10.100.70.4] (port=65201 helo=User)
04: 	by ns.n-soft.net with smtp (Exim 4.63)
05: 	(envelope-from <investitiigarantate [at] gmail.com>)
06: 	ID: [ID filtered]

header:

01: Received: from fep18.mx.upcmail.net (fep18.mx.upcmail.net [62.179.121.38])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 19 Jun 2011 xx:xx:xx +0200 (CEST)
04: Received: from edge04.upcmail.net ([192.168.13.239])
05:           by viefep18-int.chello.at
06:           (InterMail vM.8.01.02.02 201-2260-120-106-20100312) with ESMTP
07:           id
08: <20110619160228.OXLO1513.viefep18-int.chello.at [at] edge04.upcmail.net>;
09:           Sun, 19 Jun 2011 xx:xx:xx +0200
10: Received: from User ([115.242.254.227])
11: 	by edge04.upcmail.net with edge
12: 	ID: [ID filtered]

X-SourceIP: 115.242.254.227 ---> Reliance Communication Ltd.

- kjz

Die Mugus wachen auf:

header:

01: Received: from 263mail182-141.263.sina.com (HELO 263.sina.com)
02: [202.106.182.141]
03:   by mx0.gmx.net (mx046) with SMTP; 20 Jun 2011 xx:xx:xx +0200
04: Received: (qmail 8048 invoked from network); 19 Jun 2011 xx:xx:xx -0000
05: Received: from blanchardassociates.com (HELO User) (64.60.193.102)
06:   by 263.sina.com with SMTP; 19 Jun 2011 xx:xx:xx -0000

header:

01: Received: from 263mail182-141.263.sina.com (HELO 263.sina.com)
02: [202.106.182.141]
03:   by mx0.gmx.net (mx046) with SMTP; 20 Jun 2011 xx:xx:xx +0200
04: Received: (qmail 8048 invoked from network); 19 Jun 2011 xx:xx:xx -0000
05: Received: from blanchardassociates.com (HELO User) (64.60.193.102)
06:   by 263.sina.com with SMTP; 19 Jun 2011 xx:xx:xx -0000

Muguphon: +2347094063118 ---> Multi-links Telecommunications Ltd., Nigeria

header:

01: Received: from unknown (EHLO mail.trunkbow.com) [124.128.254.203]
02:   by mx0.gmx.net (mx075) with SMTP; 24 Jun 2011 xx:xx:xx +0200  
03: Received: from User (unknown [120.141.118.117])
04: 	by mail.trunkbow.com (Postfix) with ESMTPA ID: [ID filtered]
05: 	Fri, 24 Jun 2011 xx:xx:xx +0800 (CST)

IP: 120.141.118.117 ---> P1NETWORKS-MY

- kjz

Und sind hellwach:

header:

01: Received: from mout9.freenet.de (EHLO mout9.freenet.de) [195.4.92.99]
02:   by mx0.gmx.net (mx072) with SMTP; 20 Jun 2011 xx:xx:xx +0200
03: Received: from [195.4.92.15] (helo=5.mx.freenet.de)
04: 	by mout9.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from [46.166.143.150] (port=65145 helo=User)
08: 	by 5.mx.freenet.de with esmtpa (ID: [ID filtered]
09: 587) (Exim 4.72 #5)
10: 	ID: [ID filtered]

IP: 46.166.143.150 ---> Santrex Internet Services

gecrackt:

Und wieder derselbe Mugu:

header:

01: Received: from mout4.freenet.de (EHLO mout4.freenet.de) [195.4.92.94]
02:   by mx0.gmx.net (mx019) with SMTP; 23 Jun 2011 xx:xx:xx +0200
03: Received: from [195.4.92.23] (helo=13.mx.freenet.de)
04: 	by mout4.freenet.de with esmtpa (ID: [ID filtered]
05: (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from [178.162.150.197] (port=63306 helo=User)
08: 	by 13.mx.freenet.de with esmtpa (ID: [ID filtered]
09: (Exim 4.72 #5)
10: 	ID: [ID filtered]

IP: 178.162.150.197 ---> Santrex Internet Service

gecrackt:

der Sternchen Mugu:

header:

01: Received: from mail.petrobumaga-msk.ru (EHLO mail.petrobumaga-msk.ru)
02: [84.16.133.133]
03:   by mx0.gmx.net (mx106) with SMTP; 24 Jun 2011 xx:xx:xx +0200
04: Received: from User ([195.206.62.210])
05: 	(authenticated user kate [at] petrobumaga-msk.ru)
06: 	by mail.petrobumaga-msk.ru (Kerio MailServer 6.7.0);
07: 	Wed, 22 Jun 2011 xx:xx:xx +0400

IP: 195.206.62.210 ---> krechet-trakt.cust.dsi.ru

gecrackt:

Muguphon: +44 702 4083 283 ---> Magrathea Telecommunications Limited, UK

Zitat:

*UNITED NATIONS (UN)*
*Debt Reconciliation Department*
*Geneva-Switzerland**/./*//
*/Chairman Committee On Foreign/*//

header:

01: Received: from mailout02.t-online.de (mailout02.t-online.de [194.25.134.17])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 24 Jun 2011 xx:xx:xx +0200 (CEST)
04: Received: from fwd24.aul.t-online.de (fwd24.aul.t-online.de )
05: 	by mailout02.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (bp1mdyZHZt-SuE2la5VfFb77FecLo+jKIKNKW6GqX-hrH7AcNnQnkxDJZJQv6+8pU0AdHUqs5O@[218.7.191.182&
09: 	93;)
10: by fwd24.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 218.7.191.182 ---> CNC Group CHINA169 Heilongjiang

gecrackt:

header:

01: Received: from law-image.com.au (EHLO mail.law-image.com.au) [111.67.3.35]
02:   by mx0.gmx.net (mx043) with SMTP; 25 Jun 2011 xx:xx:xx +0200
03: Received: from User ([69.196.196.250]) by law-image.com.au with
04: MailEnable ESMTP; Fri, 24 Jun 2011 xx:xx:xx +1000

IP: 69.196.196.250 ---> mail.curtismaruyasu.com

gecrackt:

Mugus verfügen natürlich auch über mobiles Internet:

header:

01: Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 25 Jun 2011 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3538.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sat, 25 Jun 2011 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3538.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Sat, 25 Jun 2011 xx:xx:xx +0200 (CEST)
10: Received: from User (unknown [109.181.143.107])
11: 	by mwinf3538.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
12: 	Sat, 25 Jun 2011 xx:xx:xx +0200 (CEST)

IP: 109.181.143.107 ---> Orange PCS GPRS Services

der ATT-Mugu versucht es mit Brute Force:

header:

01: Received: from phelp.seama.edu.br (EHLO seama.edu.br) [200.242.96.58]
02:   by mx0.gmx.net (mx046) with SMTP; 26 Jun 2011 xx:xx:xx +0200
03: Received: from seama.edu.br (alvorada.seama.com.br [200.242.96.40])
04: 	by seama.edu.br (Postfix) with ESMTP ID: [ID filtered]
05: 	Thu, 23 Jun 2011 xx:xx:xx -0300 (BRT)

header:

01: Received: from phelp.seama.edu.br (EHLO seama.edu.br) [200.242.96.58]
02:   by mx0.gmx.net (mx065) with SMTP; 26 Jun 2011 xx:xx:xx +0200
03: Received: from seama.edu.br (alvorada.seama.com.br [200.242.96.40])
04: 	by seama.edu.br (Postfix) with ESMTP ID: [ID filtered]
05: 	Thu, 23 Jun 2011 xx:xx:xx -0300 (BRT)

header:

01: Received: from seama.edu.br ([200.242.96.58])
02: 	by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from seama.edu.br (alvorada.seama.com.br [200.242.96.40])
06: 	by seama.edu.br (Postfix) with ESMTP ID: [ID filtered]
07: 	Thu, 23 Jun 2011 xx:xx:xx -0300 (BRT)

Muguphon: +234 803-610-9994 ---> MTN Nigeria Communications Ltd.

- kjz

Und legen wieder los:

header:

01: Received: from aquaco5.lnk.telstra.net (EHLO evapco.com.au) [203.45.169.137]
02:   by mx0.gmx.net (mx043) with SMTP; 27 Jun 2011 xx:xx:xx +0200
03: Received: from User ([79.39.56.16]) by evapco.com.au with Microsoft
04: SMTPSVC(6.0.3790.4675);
05: 	 Sat, 25 Jun 2011 xx:xx:xx +1000

IP: 79.39.56.16 ---> host16-56-static.39-79-b.business.telecomitalia.it

header:

01: Received: from mail.sakerestates.com (EHLO mail.sakerestates.com)
02: [213.120.114.119]
03:   by mx0.gmx.net (mx105) with SMTP; 27 Jun 2011 xx:xx:xx +0200
04: Received: from User ([91.121.12.216]) by mail.sakerestates.com with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Fri, 24 Jun 2011 xx:xx:xx +0100

IP: 91.121.12.216 ---> ns38351.ovh.net

header:

01: Received: from smtp1web.tin.it (EHLO smtp1web.tin.it) [212.216.176.195]
02:   by mx0.gmx.net (mx027) with SMTP; 27 Jun 2011 xx:xx:xx +0200
03: Received: from feu1 (10.192.64.11) by smtp1web.tin.it (8.5.132)
04:         ID: [ID filtered]
05: Received: from (81.91.228.4) by webmailvtin.alice.it;  Mon, 27 Jun 2011
06: xx:xx:xx +0200

header:

01: Received: from postinofz1.prima.com.ar (HELO postinofz1.prima.com.ar)
02: [200.42.0.149]
03:   by mx0.gmx.net (mx068) with SMTP; 28 Jun 2011 xx:xx:xx +0200
04: Received: (qmail 98151 invoked from network); 28 Jun 2011 xx:xx:xx -0000
05: Received: from unknown (HELO User) (fpena [at] datamarkets.com.ar@24.62.113.210)
06:   by 200-42-0-152.prima.net.ar with SMTP; 28 Jun 2011 xx:xx:xx -0000

IP: 24.62.113.210 ---> c-24-62-113-210.hsd1.ma.comcast.net

die Madrid-Konnektion:

header:

01: Received: from smtp1web.tin.it (smtp1web.tin.it [212.216.176.195])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 27 Jun 2011 xx:xx:xx -0400 (EDT)
04: Received: from feu2 (10.192.64.12) by smtp1web.tin.it (8.5.132)
05:         ID: [ID filtered]
06: Received: from (212.225.156.116) by webmailvtin.alice.it;  Mon, 27 Jun
07: 2011 xx:xx:xx +0200

Muguphon: +34-672-517-152 ---> Vodafone España, S.a.u.

Mugufax: +34-917-692-637 ---> Colt Telecom España, S.a.

header:

01: Received: from 80.179.167.234.static.012.net.il (EHLO
02: mail.levelectronics.com) [80.179.167.234]
03:   by mx0.gmx.net (mx024) with SMTP; 30 Jun 2011 xx:xx:xx +0200
04: Received: from User ([192.168.1.252] RDNS failed) by
05: mail.levelectronics.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Thu, 23 Jun 2011 xx:xx:xx +0200

header:

01: Received: from mout8.freenet.de (EHLO mout8.freenet.de) [195.4.92.98]
02:   by mx0.gmx.net (mx098) with SMTP; 30 Jun 2011 xx:xx:xx +0200
03: Received: from [195.4.92.17] (helo=7.mx.freenet.de)
04: 	by mout8.freenet.de with esmtpa (ID: [ID filtered]
05: (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from [46.166.131.115] (port=51888 helo=User)
08: 	by 7.mx.freenet.de with esmtpa (ID: [ID filtered]
09: (Exim 4.72 #5)
10: 	ID: [ID filtered]

header:

01: Received: from mout8.freenet.de (EHLO mout8.freenet.de) [195.4.92.98]
02:   by mx0.gmx.net (mx098) with SMTP; 30 Jun 2011 xx:xx:xx +0200
03: Received: from [195.4.92.17] (helo=7.mx.freenet.de)
04: 	by mout8.freenet.de with esmtpa (ID: [ID filtered]
05: (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from [46.166.131.115] (port=51888 helo=User)
08: 	by 7.mx.freenet.de with esmtpa (ID: [ID filtered]
09: (Exim 4.72 #5)
10: 	ID: [ID filtered]

Und wieder mal eine gecrackte Kiste bei Santrex:

IP: 46.166.131.115 ---> Santrex Internet Services, LU

gecrackt:

header:

01: Received: from real.pins.net (mail.pins.net [209.212.66.16])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  1 Jul 2011 xx:xx:xx -0400 (EDT)
04: X-CGP-External-Filter: YES
05: Received: from [95.143.198.110] (account royc [at] pins.net HELO User)
06:   by real.pins.net (CommuniGate Pro SMTP 5.3.12)
07:   with ESMTPA ID: [ID filtered]

IP: 95.143.198.110 ---> serverconnect-cloud-network

Muguphon: 0034 645 511 480 ---> France Telecom España, S.a./Ornage

Mugufax: 0034 911 881 467 ---> Jazz Telecom, S.a.u., Espana

- kjz

Und noch ein paar:

der ATT/Sternchen-Mugu; als Spam vom Scanner erkannt und trotzdem in die weite Welt gepustet=merkbefreiter Postmaster:

header:

01: Received: from unknown (EHLO mail.china123.net) [112.65.244.137]
02:   by mx0.gmx.net (mx027) with SMTP; 30 Jun 2011 xx:xx:xx +0200
03: Received: from localhost (mail.china123.net [127.0.0.1])
04: 	by mail.china123.net (EMOS V1.4 (Postfix)) with ESMTP ID: [ID filtered]
05: 	Thu, 30 Jun 2011 xx:xx:xx +0800 (CST)
06: X-Virus-Scanned: amavisd-new at china123.net
07: X-Spam-Flag: YES
08: X-Spam-Score: 8.774
09: X-Spam-Level: ********
10: X-Spam-Status: Yes, score=8.774 tagged_above=-10 required=5
11: 	tests=[DSPAM:Whitelisted=-1.000, ALL_TRUSTED=-1.44,
12: 	DATE_IN_FUTURE_06_12=3.099, DSPAM_AWL=-1.05, FH_DATE_PAST_20XX=3.384,
13: 	FORGED_MUA_OUTLOOK=4.199, MISSING_HEADERS=1.581, MISSING_MID=0.001]
14: 	autolearn=unavailable
15: Received: from mail.china123.net ([127.0.0.1])
16: 	by localhost (mail.china123.net [127.0.0.1]) (amavisd-new, port 10024)
17: 	with ESMTP ID: [ID filtered]
18: Received: from User (adsl-65-42-151-201.dsl.chcgil.ameritech.net
19: [65.42.151.201])
20: 	by mail.china123.net (EMOS V1.4 (Postfix)) with ESMTPA ID: [ID filtered]
21: 	Thu, 30 Jun 2011 xx:xx:xx +0800 (CST)

IP: 65.42.151.201 ---> ATT

Zitat:

*US AMBASSADOR TO NIGERIA*
*11 GARKI ROAD ABUJA*
*ABUJA, NIGERIA*
*Telephone: +234-709-114-7018*

Muguphon: +234-709-114-7018 ---> Multi-links Telecommunications Ltd., Nigeria

header:

01: Received: from mail-wy0-f195.google.com (mail-wy0-f195.google.com
02: [74.125.82.195])
03: 	(using TLSv1 with cipher RC4-SHA (128/128 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Fri,  1 Jul 2011 xx:xx:xx +0200 (CEST)
07: Received: by wyg8 with SMTP ID: [ID filtered]
08:         for xxxxx; Fri, 01 Jul 2011 xx:xx:xx -0700 (PDT)
09: MIME-Version: 1.0
10: Received: by 10.227.162.133 with SMTP id
11: v5mr3178194wbx.14.1309547230924; Fri,
12:  01 Jul 2011 xx:xx:xx -0700 (PDT)
13: Received: by 10.227.54.76 with HTTP; Fri, 1 Jul 2011 xx:xx:xx -0700 (PDT)

der Webstick-Mugu:

header:

01: Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.191])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  2 Jul 2011 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3618.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sat,  2 Jul 2011 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3618.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Sat,  2 Jul 2011 xx:xx:xx +0200 (CEST)
10: Received: from User (unknown [89.193.69.227])
11: 	by mwinf3618.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
12: 	Sat,  2 Jul 2011 xx:xx:xx +0200 (CEST)

IP: 89.193.69.227 ---> Orange PCS GPRS services

Muguphon: +44 704 5768709 ---> Open Telecom International Ltd., UK

header:

01: Received: from nextlogin.de (EHLO nextlogin.de) [195.10.195.160]
02:   by mx0.gmx.net (mx047) with SMTP; 03 Jul 2011 xx:xx:xx +0200
03: Received: from User (host81-136-139-178.in-addr.btopenworld.com
04: [81.136.139.178])
05: 	by nextlogin.de (postfix) with ESMTPA ID: [ID filtered]
06: 	Sun,  3 Jul 2011 xx:xx:xx +0200 (CEST)

- kjz

Auf geht's in die nächste Runde:

header:

01: Received: from smtp1web.tin.it (smtp1web.tin.it [212.216.176.195])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  5 Jul 2011 xx:xx:xx +0200 (CEST)
04: Received: from pswm9.cp.tin.it (192.168.70.30) by smtp1web.tin.it (8.5.132)
05:         ID: [ID filtered]

X-Originating-IP: 98.126.76.170 ---> VPLSNET

der ATT/Yahoo/Sternchen-Mugu:

header:

01: Received: from nm18-vm1.access.bullet.mail.mud.yahoo.com
02: (nm18-vm1.access.bullet.mail.mud.yahoo.com [66.94.236.24])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Thu,  7 Jul 2011 xx:xx:xx +0200 (CEST)
05: Received: from [66.94.237.195] by nm18.access.bullet.mail.mud.yahoo.com
06: with NNFMP; 07 Jul 2011 xx:xx:xx -0000
07: Received: from [98.139.221.60] by tm6.access.bullet.mail.mud.yahoo.com
08: with NNFMP; 07 Jul 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by smtp101.biz.mail.bf1.yahoo.com with NNFMP;
10: 07 Jul 2011 xx:xx:xx -0000
11: Received: from User (1----102 [at] 41.206.12.18 with login)
12:         by smtp101.biz.mail.bf1.yahoo.com with SMTP; 06 Jul 2011
13: xx:xx:xx -0700 PDT

IP: 41.206.12.18 ---> 41.206.12.18.mtngprs.net/MTN, Nigeria

Zitat:

*/REGARDS,/*//
*//*//
*/Mallam Sanusi Lamido Aminu Sanusi /*//
*/Governor Central Bank of Nigeria [CBN] /*//

Muguphon: +234-802-037-7660 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from unknown (EHLO mail.jian-nong.com) [124.42.3.52]
02:   by mx0.gmx.net (mx104) with SMTP; 08 Jul 2011 xx:xx:xx +0200
03: Received: from localhost (mail.jian-nong.com [127.0.0.1])
04: 	by mail.jian-nong.com (EMOS V1.5 (Postfix)) with ESMTP ID: [ID filtered]
05: 	Fri,  8 Jul 2011 xx:xx:xx +0800 (CST)
06: X-Virus-Scanned: amavisd-new at jian-nong.com
07: X-Spam-Flag: YES
08: X-Spam-Score: 6.291
09: X-Spam-Level: ******
10: X-Spam-Status: Yes, score=6.291 tagged_above=-10 required=5
11: 	tests=[DSPAM:Innocent=-1.000, ALL_TRUSTED=-1.44, DSPAM_HAM_99=-3.23,
12: 	FH_DATE_PAST_20XX=3.384, FORGED_MUA_OUTLOOK=4.199,
13: 	MISSING_HEADERS=1.581, MISSING_MID=0.001,
14: 	XMAILER_MIMEOLE_OL_1ECD5=2.796] autolearn=unavailable
15: Received: from mail.jian-nong.com ([127.0.0.1])
16: 	by localhost (mail.jian-nong.com [127.0.0.1]) (amavisd-new, port 10024)
17: 	with ESMTP ID: [ID filtered]
18: Received: from User (unknown [120.140.38.66])
19: 	by mail.jian-nong.com (EMOS V1.5 (Postfix)) with ESMTPA ID: [ID filtered]
20: 	Fri,  8 Jul 2011 xx:xx:xx +0800 (CST)

Und wieder mal: Spamfilter ist installiert und hat richtigerweise zugeschlagen, aber hirnlos administriert wird die Chose trotzdem in die Welt gepustet....

IP: 120.140.38.66 ---> Packet One Networks (M) Sdn

(Packet One, die Bude sollte man sich merken...)

header:

01: Received: from unknown (HELO mail.nxz.com.cn) [61.133.210.211]
02:   by mx0.gmx.net (mx069) with SMTP; 08 Jul 2011 xx:xx:xx +0200
03: Received: from User ([120.141.150.207])
04: 	(envelope-sender <xsgs [at] nxz.com.cn>)
05: 	by 172.16.0.11 with ESMTP
06: 	for xxxxx; Wed, 22 Jun 2011 xx:xx:xx +0800

IP: 120.141.150.207 ---> Packet One Networks (M) Sdn

header:

01: Received: from linux01.atx.net (EHLO linux01.atx.net) [209.239.36.12]
02:   by mx0.gmx.net (mx088) with SMTP; 08 Jul 2011 xx:xx:xx +0200
03: Received: from localhost.localdomain (localhost [127.0.0.1])
04: 	by linux01.atx.net (8.14.3/8.12.10) with ESMTP ID: [ID filtered]
05: 	Fri, 8 Jul 2011 xx:xx:xx -0400

X-OriginatingIP: 41.216.38.164 (angie) ---> BENINTELECOMS

- kjz

Es rundet weiter:

header:

01: Received: from vps.stevesdomain.net (EHLO vps.stevesdomain.net)
02: [207.58.145.153]
03:   by mx0.gmx.net (mx002) with SMTP; 05 Jul 2011 xx:xx:xx +0200
04: Received: from [210.121.172.120] (helo=User)
05: 	by vps.stevesdomain.net with esmtpa (Exim 4.69)
06: 	(envelope-from <info [at] mail.org>)
07: 	ID: [ID filtered]

IP: 210.121.172.120 ---> Korne

der UMTS-Mugu:

header:

01: Received: from unknown (EHLO smtp5.freeserve.com) [193.252.22.159]
02:   by mx0.gmx.net (mx055) with SMTP; 07 Jul 2011 xx:xx:xx +0200
03: Received: from me-wanadoo.net (localhost [127.0.0.1])
04: 	by mwinf3414.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
05: 	Thu,  7 Jul 2011 xx:xx:xx +0200 (CEST)
06: Received: from me-wanadoo.net (localhost [127.0.0.1])
07: 	by mwinf3414.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
08: 	Thu,  7 Jul 2011 xx:xx:xx +0200 (CEST)
09: Received: from User (unknown [109.181.54.43])
10: 	by mwinf3414.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
11: 	Thu,  7 Jul 2011 xx:xx:xx +0200 (CEST)

IP: 109.181.54.43 ---> Orange PCS GPRS Services

header:

01: Received: from advancebass.com (EHLO advancebass.com) [207.162.216.161]
02:   by mx0.gmx.net (mx063) with SMTP; 09 Jul 2011 xx:xx:xx +0200
03: Received: (qmail 32701 invoked by UID: [UID filtered]
04: Received: from unknown (HELO User) (test [at] advancebass.com@199.48.176.23)
05:   by advancebass.com with ESMTPA; 9 Jul 2011 xx:xx:xx -0000

IP: 199.48.176.23 ---> Internex

header:

01: Received: from mail3.xz.gov.cn (EHLO mail2.xz.gov.cn) [58.218.194.102]
02:   by mx0.gmx.net (mx003) with SMTP; 10 Jul 2011 xx:xx:xx +0200
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by mail2.xz.gov.cn (tmailer) with ESMTP ID: [ID filtered]
05: 	Mon, 11 Jul 2011 xx:xx:xx +0800 (CST)
06: Received: from mail2.xz.gov.cn ([127.0.0.1])
07: 	by localhost (mail2.xz.gov.cn [127.0.0.1]) (theinterface-new, port 10024)
08: 	with ESMTP ID: [ID filtered]
09: Received: from User (unknown [188.168.64.216])
10: 	by mail2.xz.gov.cn (tmailer) with ESMTP ID: [ID filtered]
11: 	Mon, 11 Jul 2011 xx:xx:xx +0800 (CST)

IP: 188.168.64.216 ---> 188.168.64.216.retail.sakhttk.ru

- kjz

aus der Mugu-Kiste:

header:

01: Received: from rwandatel.rw (mail.rwandatel.rw [196.12.157.157])
02: 	by mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: X-McAfee-Antivirus: verified by antivirus at RWANDATEL.rw
06: Received: from [120.141.175.143] (account tgershom HELO User)
07:   by rwandatel.rw (CommuniGate Pro SMTP 4.2.8)
08:   with ESMTP ID: [ID filtered]

man merke sich:

IP: 120.141.175.143 ---> Packet One Networks

header:

01: Received: from nova.helios.ru (EHLO nova.helios.ru) [212.96.127.20]
02:   by mx0.gmx.net (mx035) with SMTP; 10 Jul 2011 xx:xx:xx +0200
03: Received: from User (auh-b16838.alshamil.net.ae [83.110.4.234])
04: 	(Authenticated sender: test [at] helios.ru)
05: 	by nova.helios.ru (Postfix) with ESMTPA ID: [ID filtered]
06: 	Mon, 11 Jul 2011 xx:xx:xx +0400 (MSD)

gecrackt:

header:

01: Received: from rwandatel.rw (mail.rwandatel.rw [196.12.157.157])
02: 	by mx.kundenserver.de (node=mxbap2) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: X-McAfee-Antivirus: verified by antivirus at RWANDATEL.rw
06: Received: from [120.141.175.143] (account tgershom HELO User)
07:   by rwandatel.rw (CommuniGate Pro SMTP 4.2.8)
08:   with ESMTP ID: [ID filtered]

die Kiste kennt man doch:

IP: 120.141.175.143 ---> Packet One Networks

header:

01: Received: from apply.viaduc.fr (apply.viaduc.fr [178.33.76.36])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	Mon, 11 Jul 2011 xx:xx:xx -0400 (EDT)
04: Received: from webmail.nom-domaine.fr (localhost [127.0.0.1])
05: 	by apply.viaduc.fr (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 12 Jul 2011 xx:xx:xx +0200 (CEST)

der Sternchen-Mugu:

header:

01: Received: from mout7.freenet.de (EHLO mout7.freenet.de) [195.4.92.97]
02:   by mx0.gmx.net (mx098) with SMTP; 12 Jul 2011 xx:xx:xx +0200
03: Received: from [195.4.92.26] (helo=16.mx.freenet.de)
04: 	by mout7.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from [46.166.129.110] (port=56588 helo=User)
08: 	by 16.mx.freenet.de with esmtpa (ID: [ID filtered]
09: 587) (Exim 4.72 #5)
10: 	ID: [ID filtered]

Santrex kennt man doch auch...

IP: 46.166.129.110 ---> Santrex UK VPS Services

gecrackt:

Zitat:

*Hello friend, *
**
*_STRICTLY CONFIDENTIAL_*

header:

01: Received: from mail.rwandatel.rw (EHLO rwandatel.rw) [196.12.157.157]
02:   by mx0.gmx.net (mx017) with SMTP; 14 Jul 2011 xx:xx:xx +0200
03: X-McAfee-Antivirus: verified by antivirus at RWANDATEL.rw
04: Received: from [120.141.175.143] (account tgershom HELO User)
05:   by rwandatel.rw (CommuniGate Pro SMTP 4.2.8)
06:   with ESMTP ID: [ID filtered]

header:

01: Received: from mail.rwandatel.rw (EHLO rwandatel.rw) [196.12.157.157]
02:   by mx0.gmx.net (mx053) with SMTP; 14 Jul 2011 xx:xx:xx +0200
03: X-McAfee-Antivirus: verified by antivirus at RWANDATEL.rw
04: Received: from [120.141.175.143] (account tgershom HELO User)
05:   by rwandatel.rw (CommuniGate Pro SMTP 4.2.8)
06:   with ESMTP ID: [ID filtered]

die Dreckskiste ist immer noch online:

IP: 20.141.175.143 ---> Packet One Networks (M) Sdn, Malaysia

gecrackt:

- kjz

Unten in der Kiste ist noch was:

header:

01: Received: from mail.rwandatel.rw (EHLO rwandatel.rw) [196.12.157.157]
02:   by mx0.gmx.net (mx041) with SMTP; 12 Jul 2011 xx:xx:xx +0200
03: X-McAfee-Antivirus: verified by antivirus at RWANDATEL.rw
04: Received: from [120.141.175.143] (account
05: 	[EMAIL="tgershom [at] rwandatel.rw"]tgershom[/EMAIL] HELO User)
06:   by rwandatel.rw (CommuniGate Pro SMTP 4.2.8)
07:   with ESMTP ID: [ID filtered]

header:

01: Received: from rwandatel.rw (mail.rwandatel.rw [196.12.157.157])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 13 Jul 2011 xx:xx:xx +0200 (CEST)
04: X-McAfee-Antivirus: verified by antivirus at RWANDATEL.rw
05: Received: from [120.141.175.143] (account tgershom HELO User)
06:   by rwandatel.rw (CommuniGate Pro SMTP 4.2.8)
07:   with ESMTP ID: [ID filtered]

die Dreckskiste ist immer noch undicht:

IP: 120.141.175.143 ---> Packet One Networks (M) Sdn, MY

der UMTS-Mugu:

header:

01: Received: from smtp5.freeserve.com (unknown [193.252.22.152])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 15 Jul 2011 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3427.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Fri, 15 Jul 2011 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3427.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Fri, 15 Jul 2011 xx:xx:xx +0200 (CEST)
10: Received: from User (unknown [109.180.39.83])
11: 	by mwinf3427.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
12: 	Fri, 15 Jul 2011 xx:xx:xx +0200 (CEST)

IP: 109.180.39.83 ---> Orange GPRS Service

Muguphon: +1-516-986-0659 ---> Level 3 Communications, Llc - Ny

header:

01: Received: from unknown (EHLO mail.vostoktelecom.ru) [93.174.116.6]
02:   by mx0.gmx.net (mx037) with SMTP; 15 Jul 2011 xx:xx:xx +0200
03: Received: from User ([64.31.24.17])
04: 	(authenticated user admin [at] vostoktelecom.ru)
05: 	by mail.vostoktelecom.ru (Kerio MailServer 6.3.0);
06: 	Fri, 15 Jul 2011 xx:xx:xx +0400

IP: 64.31.24.17 ---> 17-24-31-64.servebyte.net

gecrackt:

Muguphon: +234-709-447-7929 ---> Multi-links Telecommunications Ltd., Nigeria

header:

01: Received: from 61-31-58-3.static.tfn.net.tw (EHLO dns.ciblea.com.tw)
02: [61.31.58.3]
03:   by mx0.gmx.net (mx067) with SMTP; 16 Jul 2011 xx:xx:xx +0200
04: Received: from User (227-61-31-64.servebyte.net [64.31.61.227])
05: 	(authenticated bits=0)
06: 	by dns.ciblea.com.tw (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
07: 	Sat, 16 Jul 2011 xx:xx:xx +0800

Muguphon: +234 80-6111-25-03 ---> MTN Nigeria Communications Ltd.

der UMTS-Mugu:

header:

01: Received: from smtp5.freeserve.com ([193.252.22.128])
02: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from me-wanadoo.net (localhost [127.0.0.1])
06: 	by mwinf3418.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
07: 	Sat, 16 Jul 2011 xx:xx:xx +0200 (CEST)
08: Received: from me-wanadoo.net (localhost [127.0.0.1])
09: 	by mwinf3418.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
10: 	Sat, 16 Jul 2011 xx:xx:xx +0200 (CEST)
11: Received: from User (unknown [109.180.7.76])
12: 	by mwinf3418.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
13: 	Sat, 16 Jul 2011 xx:xx:xx +0200 (CEST)

header:

01: Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.191])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 16 Jul 2011 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3611.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sat, 16 Jul 2011 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3611.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Sat, 16 Jul 2011 xx:xx:xx +0200 (CEST)
10: Received: from User (unknown [109.180.248.107])
11: 	by mwinf3611.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
12: 	Sat, 16 Jul 2011 xx:xx:xx +0200 (CEST)

IP: 109.180.7.76 ---> Orange GPRS Service

- kjz

Bei den Mugus sind die 'Sommerferien' schon vorbei und bei den Russkis gibt's gecrackte Mailserver wohl wieder im Sonderangebot:

der UMTS-Mugu:

header:

01: Received: from smtp7.freeserve.com (EHLO smtp6.freeserve.com) [80.12.242.2]
02:   by mx0.gmx.net (mx039) with SMTP; 18 Jul 2011 xx:xx:xx +0200
03: Received: from me-wanadoo.net (localhost [127.0.0.1])
04: 	by mwinf3j17.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
05: 	Mon, 18 Jul 2011 xx:xx:xx +0200 (CEST)
06: Received: from me-wanadoo.net (localhost [127.0.0.1])
07: 	by mwinf3j17.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
08: 	Mon, 18 Jul 2011 xx:xx:xx +0200 (CEST)
09: Received: from User (unknown [89.193.130.61])
10: 	by mwinf3j17.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
11: 	Mon, 18 Jul 2011 xx:xx:xx +0200 (CEST)

header:

01: Received: (qmail invoked by alias); 18 Jul 2011 xx:xx:xx -0000
02: Received: from smtp7.freeserve.com (EHLO smtp6.freeserve.com) [80.12.242.2]
03:   by mx0.gmx.net (mx042) with SMTP; 18 Jul 2011 xx:xx:xx +0200
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3j17.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Mon, 18 Jul 2011 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3j17.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Mon, 18 Jul 2011 xx:xx:xx +0200 (CEST)
10: Received: from User (unknown [89.193.130.61])
11: 	by mwinf3j17.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
12: 	Mon, 18 Jul 2011 xx:xx:xx +0200 (CEST)

IP: 89.193.130.61 ---> Orange PCS GPRS services

wieder der UMTS-Mugu:

header:

01: Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.192])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 19 Jul 2011 xx:xx:xx +0200 (CEST)
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3621.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue, 19 Jul 2011 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3621.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue, 19 Jul 2011 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3621.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Tue, 19 Jul 2011 xx:xx:xx +0200 (CEST)
13: Received: from User (unknown [89.193.154.188])
14: 	by mwinf3621.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]
15: 	Tue, 19 Jul 2011 xx:xx:xx +0200 (CEST)

IP: 89.193.154.188 ---> Orange PCS GPRS services

header:

01: Received: from 200-54-177-243.static.tie.cl (EHLO mail.ferouch.cl)
02: [200.54.177.243]
03:   by mx0.gmx.net (mx002) with SMTP; 19 Jul 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.ferouch.cl (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 19 Jul 2011 xx:xx:xx -0400 (CLT)
07: Received: from mail.ferouch.cl ([127.0.0.1])
08: 	by localhost (mail.ferouch.cl [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from User (unknown [175.139.87.82])
11: 	by mail.ferouch.cl (Postfix) with ESMTPA ID: [ID filtered]
12: 	Tue, 19 Jul 2011 xx:xx:xx -0400 (CLT)

IP: 175.139.87.82 ---> TELEKOM MALAYSIA BERHAD

Muguphon: +44-7031-864-662 ---> Magrathea Telecommunications Limited, UK

der Yahoo/ATT-Mugu:

header:

01: Received: from nm19-vm1.bullet.mail.bf1.yahoo.com
02: (nm19-vm1.bullet.mail.bf1.yahoo.com [98.139.213.133])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 19 Jul 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.212.152] by nm19.bullet.mail.bf1.yahoo.com with
06: NNFMP; 19 Jul 2011 xx:xx:xx -0000
07: Received: from [98.139.213.11] by tm9.bullet.mail.bf1.yahoo.com with
08: NNFMP; 19 Jul 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by smtp111.mail.bf1.yahoo.com with NNFMP; 19
10: Jul 2011 xx:xx:xx -0000
11: Received: from User (siritabrown3 [at] 196.201.51.18 with login)
12:         by smtp111.mail.bf1.yahoo.com with SMTP; 19 Jul 2011 xx:xx:xx
13: -0700 PDT

IP: 196.201.51.18 ---> MTN, Ghana

header:

01: Received: from mailout04.t-online.de (mailout04.t-online.de [194.25.134.18])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 20 Jul 2011 xx:xx:xx +0200 (CEST)
04: Received: from fwd25.aul.t-online.de (fwd25.aul.t-online.de )
05: 	by mailout04.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (r1JyUEZ-8t3ZalME-LREntJ039vfuXrF0-FW4h135c9XCqgEMaWgPoAzxiQFcNk3km+RuMkutn@[50.81.220.31&#
09: 	3;)
10: by fwd25.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 50.81.220.31 ---> 50-81-220-31.client.mchsi.com

gecrackt:

Muguphon: +1-253-214-4996 ---> Xo Washington, Inc.

header:

01: Received: from 173-13-188-37-sfba.hfc.comcastbusiness.net (EHLO
02: enkiserver.enkisports.com) [173.13.188.37]
03:   by mx0.gmx.net (mx046) with SMTP; 20 Jul 2011 xx:xx:xx +0200
04: Received: from User (unknown [115.173.32.144])
05: 	(Authenticated sender: test)
06: 	by enkiserver.enkisports.com (Postfix) with ESMTPA ID: [ID filtered]
07: 	Wed, 20 Jul 2011 xx:xx:xx -0700 (PDT)

header:

01: Received: from 173-13-188-37-sfba.hfc.comcastbusiness.net (EHLO
02: enkiserver.enkisports.com) [173.13.188.37]
03:   by mx0.gmx.net (mx118) with SMTP; 20 Jul 2011 xx:xx:xx +0200
04: Received: from User (unknown [115.173.32.144])
05: 	(Authenticated sender: test)
06: 	by enkiserver.enkisports.com (Postfix) with ESMTPA ID: [ID filtered]
07: 	Wed, 20 Jul 2011 xx:xx:xx -0700 (PDT)

header:

01: Received-SPF: softfail (mxbap4: transitioning domain of live.cn does not
02: designate 173.13.188.37 as permitted sender) client-ip=173.13.188.37;
03: envelope-from=nokiapromtin12011 [at] live.cn; helo=enkiserver.enkisports.com;
04: Received: from enkiserver.enkisports.com
05: (173-13-188-37-sfba.hfc.comcastbusiness.net [173.13.188.37])
06: 	by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
07: 	ID: [ID filtered]
08: xx:xx:xx +0200
09: Received: from User (unknown [115.173.32.144])
10: 	(Authenticated sender: test)
11: 	by enkiserver.enkisports.com (Postfix) with ESMTPA ID: [ID filtered]
12: 	Wed, 20 Jul 2011 xx:xx:xx -0700 (PDT)

IP: 115.173.32.144 ---> China Unicom Guangdong

gecrackt:

header:

01: Received: from mail.cwu.edu.cn (HELO cwu.edu.cn) [219.242.28.132]
02:   by mx0.gmx.net (mx004) with SMTP; 20 Jul 2011 xx:xx:xx +0200
03: X-EYOU-SPAMVALUE:0
04: X-EMDG-VER:2009-02-28
05: Received: (eyou anti_spam gateway 3.0); Thu, 21 Jul 2011 xx:xx:xx +0800
06: Message-ID: [ID filtered]
07: X-EYOUMAIL-SMTPAUTH: @
08: Received: from 188.51.100.104 by 219.242.28.132 with SMTP; Thu, 21 Jul
09: 2011 xx:xx:xx +0800

IP: 188.51.100.104 ---> SAUDINET_DSL_POOL

header:

01: Received: from mail.dscpanel.com (EHLO mail.dscpanel.com) [174.123.118.85]
02:   by mx0.gmx.net (mx006) with SMTP; 21 Jul 2011 xx:xx:xx +0200
03: Received: from adsl-074-247-137-201.sip.owb.bellsouth.net
04: ([74.247.137.201]:50224 helo=User)
05: 	by us2.dscpanel.com with esmtpa (Exim 4.69)
06: 	(envelope-from <paymastergeneralservice01 [at] one.co.il>)
07: 	ID: [ID filtered]

der Sternchen-Mugu:

header:

01: Received: (qmail invoked by alias); 22 Jul 2011 xx:xx:xx -0000
02: Received: from 10-24-31-64.servebyte.net (EHLO mx4.hotmail.com)
03: [64.31.24.10]
04:   by mx0.gmx.net (mx105) with SMTP; 22 Jul 2011 xx:xx:xx +0200

Zitat:

/*FROM: PROMOTIONS MANAGER,
INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT,
REF: 8-25-27-28-38-41
BATCH: 08/11810/jet*/

header:

01: Received: from nm25.bullet.mail.sp2.yahoo.com
02: (nm25.bullet.mail.sp2.yahoo.com [98.139.91.95])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Fri, 22 Jul 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.91.70] by nm25.bullet.mail.sp2.yahoo.com with
06: NNFMP; 22 Jul 2011 xx:xx:xx -0000
07: Received: from [98.139.91.58] by tm10.bullet.mail.sp2.yahoo.com with
08: NNFMP; 22 Jul 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1058.mail.sp2.yahoo.com with NNFMP; 22
10: Jul 2011 xx:xx:xx -0000
11: Received: from [41.214.126.27] by web112903.mail.gq1.yahoo.com via HTTP;
12: Fri, 22 Jul 2011 xx:xx:xx PDT

IP: 41.214.126.27 ---> Pool-ADSL-Sonatel-Multimedia, SN

- kjz

weitere Vermeldungen:

header:

01: Received: from mta-out.inet.fi (EHLO jenni2.inet.fi) [195.156.147.13]
02:   by mx0.gmx.net (mx043) with SMTP; 23 Jul 2011 xx:xx:xx +0200
03: Received: from riikka7.rokki.sonera.fi (195.156.147.11) by
04: jenni2.inet.fi (8.5.133)
05:         ID: [ID filtered]
06: Received: from (10.16.63.4) by webmail.inet.fi;  Sat, 23 Jul 2011
07: xx:xx:xx +0300

gecrackt:

header:

01: Received: from ims-m13.mx.aol.com (EHLO ims-m13.mx.aol.com) [64.12.207.146]
02:   by mx0.gmx.net (mx054) with SMTP; 22 Jul 2011 xx:xx:xx +0200
03: Received: from oms-mb03.r1000.mx.aol.com (oms-mb03.r1000.mx.aol.com
04: [64.12.102.139])
05: 	by ims-m13.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
06: 	Fri, 22 Jul 2011 xx:xx:xx -0400
07: Received: from mtaout-db05.r1000.mx.aol.com
08: (mtaout-db05.r1000.mx.aol.com [172.29.51.197])
09: 	by oms-mb03.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
10: E8AF41C000085;
11: 	Fri, 22 Jul 2011 xx:xx:xx -0400 (EDT)
12: Received: from User (unknown [64.20.0.20])
13: 	by mtaout-db05.r1000.mx.aol.com (MUA/Third Party Client Interface) with
14: ESMTPA ID: [ID filtered]
15: 	Fri, 22 Jul 2011 xx:xx:xx -0400 (EDT)

header:

01: Received: from mout1.freenet.de (EHLO mout1.freenet.de) [195.4.92.91]
02:   by mx0.gmx.net (mx017) with SMTP; 23 Jul 2011 xx:xx:xx +0200
03: Received: from [195.4.92.21] (helo=11.mx.freenet.de)
04: 	by mout1.freenet.de with esmtpa (ID: [ID filtered]
05: (port 25) (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from [46.166.143.31] (port=4337 helo=User)
08: 	by 11.mx.freenet.de with esmtpa (ID: [ID filtered]
09: (port 587) (Exim 4.72 #5)
10: 	ID: [ID filtered]

gecrackt:

header:

01: Received: from host52.maxim.net (EHLO w13380.hostcentric.net) [66.40.10.52]
02:   by mx0.gmx.net (mx019) with SMTP; 23 Jul 2011 xx:xx:xx +0200
03: Received: (qmail 4432 invoked from network); 22 Jul 2011 xx:xx:xx -0400
04: Received: from mail.ics-amman.edu.jo (HELO ICS-TMG.ics-amman.edu.jo)
05: (80.90.171.106)
06:   by retimiami.com with (DHE-RSA-AES256-SHA encrypted) SMTP; 22 Jul 2011
07: xx:xx:xx -0400

IP: 80.90.171.106 ---> Link, Jordanien

- kjz

Und weiter geht's in Sachen Mugu:

header:

01: Received: from host-253.198.by.nwlgcore.org (EHLO woodhey.rmplc.co.uk)
02: [212.121.198.253]
03:   by mx0.gmx.net (mx113) with SMTP; 25 Jul 2011 xx:xx:xx +0200
04: Received: from User [178.15.79.165] by woodhey.rmplc.co.uk with ESMTP
05:   (SMTPD32-7.07) ID: [ID filtered]

IP: 178.15.79.165 ---> business-178-015-079-165.static.arcor-ip.net

der Sternchen-Mugu:

header:

01: Received: from melt.melt.ru (EHLO base.melt.melt.ru) [89.184.1.92]
02:   by mx0.gmx.net (mx077) with SMTP; 25 Jul 2011 xx:xx:xx +0200
03: Received: from User ([74.63.243.143] RDNS failed) by base.melt.melt.ru
04: with Microsoft SMTPSVC(6.0.3790.4675);
05: 	 Mon, 25 Jul 2011 xx:xx:xx +0400

IP: 74.63.243.143 ---> 143-243-63-74.servebyte.net

Zitat:

*/Winifred Davidson/*//
*/Funds investigator /*//

header:

01: Received: from netxan01.netxan.com.br (EHLO netxan01.netxan.com.br)
02: [200.215.70.1]
03:   by mx0.gmx.net (mx055) with SMTP; 26 Jul 2011 xx:xx:xx +0200
04: Received: from User ([198.133.74.139])
05: 	(authenticated bits=0)
06: 	by netxan01.netxan.com.br (8.14.2/8.14.2) with ESMTP ID: [ID filtered]
07: 	Mon, 25 Jul 2011 xx:xx:xx -0300

IP: 198.133.74.139 ---> InterSystems Corporation

header:

01: Received: from qpmail.questionpro.net (mail1.questionpro.com [72.5.52.207])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Wed, 27 Jul 2011 xx:xx:xx +0200 (CEST)
06: Received: from qpweb9 (qpweb9 [10.0.0.102])
07: 	by qpmail.questionpro.net (8.13.8/8.13.1) with ESMTP ID: [ID filtered]
08: 	for xxxxx; Tue, 26 Jul 2011 xx:xx:xx -0700

gecracktes Horde:

header:

01: Received: from london.ucc.usyd.edu.au (EHLO london.ucc.usyd.edu.au)
02: [129.78.220.2]
03:   by mx0.gmx.net (mx054) with SMTP; 28 Jul 2011 xx:xx:xx +0200
04: Received: from london.ucc.usyd.edu.au (localhost [127.0.0.1])
05: 	by localhost (Postfix) with SMTP ID: [ID filtered]
06: 	Thu, 28 Jul 2011 xx:xx:xx +1000 (EST)
07: Received: from wmfe0.ucc.usyd.edu.au (wmfe0.ucc.usyd.edu.au [129.78.64.42])
08: 	by london.ucc.usyd.edu.au (Postfix) with ESMTP ID: [ID filtered]
09: 	Thu, 28 Jul 2011 xx:xx:xx +1000 (EST)
10: Received: from 180.74.244.198 ([180.74.244.198]) by www-mail.usyd.edu.au
11:  (Horde Framework) with HTTP; Thu, 28 Jul 2011 xx:xx:xx +1000

IP: 180.74.244.198 ---> Packet One Networks (M) Sdn, MY

header:

01: Received: from ipex3.johnshopkins.edu (EHLO ipex3.johnshopkins.edu)
02: [128.220.161.140]
03:   by mx0.gmx.net (mx103) with SMTP; 28 Jul 2011 xx:xx:xx +0200
04: X-IronPort-AV: E=Sophos;i="4.67,281,1309752000";
05:    d="scan'208";a="128607581"
06: Received: from commsmail.johnshopkins.edu ([10.173.7.15])
07:   by ipex3.johnshopkins.edu with ESMTP/TLS/RC4-MD5; 28 Jul 2011 xx:xx:xx
08: -0400
09: MIME-version: 1.0
10: Content-disposition: inline
11: Content-type: text/plain; charset=iso-8859-1
12: Received: from johnshopkins.edu ([unknown] [10.173.7.11])
13:  by commsmail.johnshopkins.edu
14:  (Sun Java(tm) System Messaging Server 7u3-12.01 64bit (built Oct 15 2009))
15:  with ESMTP ID: [ID filtered]
16:  Thu, 28 Jul 2011 xx:xx:xx -0400 (EDT)
17: Received: from [10.173.109.13] (Forwarded-For: [182.62.34.204])
18:  by commsmail.johnshopkins.edu (mshttpd); Thu, 28 Jul 2011 xx:xx:xx
19: +0800

header:

01: Received: from ipex3.johnshopkins.edu (EHLO ipex3.johnshopkins.edu)
02: [128.220.161.140]
03:   by mx0.gmx.net (mx015) with SMTP; 28 Jul 2011 xx:xx:xx +0200
04: X-IronPort-AV: E=Sophos;i="4.67,281,1309752000";
05:    d="scan'208";a="128607582"
06: Received: from commsmail.johnshopkins.edu ([10.173.7.15])
07:   by ipex3.johnshopkins.edu with ESMTP/TLS/RC4-MD5; 28 Jul 2011 xx:xx:xx
08: -0400
09: MIME-version: 1.0
10: Content-disposition: inline
11: Content-type: text/plain; charset=iso-8859-1
12: Received: from johnshopkins.edu ([unknown] [10.173.7.11])
13:  by commsmail.johnshopkins.edu
14:  (Sun Java(tm) System Messaging Server 7u3-12.01 64bit (built Oct 15 2009))
15:  with ESMTP ID: [ID filtered]
16: xxxxx;
17:  Thu, 28 Jul 2011 xx:xx:xx -0400 (EDT)
18: Received: from [10.173.109.13] (Forwarded-For: [182.62.34.204])
19:  by commsmail.johnshopkins.edu (mshttpd); Thu, 28 Jul 2011 xx:xx:xx +0800

header:

01: Received: from ipex3.johnshopkins.edu (ipex3.johnshopkins.edu
02: [128.220.161.140])
03: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: X-IronPort-AV: E=Sophos;i="4.67,281,1309752000";
07:    d="scan'208";a="128607598"
08: Received: from jhem01.johnshopkins.edu (HELO commsmail.johnshopkins.edu)
09: ([10.173.7.11])
10:   by ipex3.johnshopkins.edu with ESMTP/TLS/RC4-MD5; 28 Jul 2011 xx:xx:xx
11: -0400
12: MIME-version: 1.0
13: Content-disposition: inline
14: Content-type: text/plain; charset=iso-8859-1
15: Received: from johnshopkins.edu ([unknown] [10.173.7.11])
16:  by commsmail.johnshopkins.edu
17:  (Sun Java(tm) System Messaging Server 7u3-12.01 64bit (built Oct 15 2009))
18:  with ESMTP ID: [ID filtered]
19: xxxxx;
20:  Thu, 28 Jul 2011 xx:xx:xx -0400 (EDT)
21: Received: from [10.173.109.13] (Forwarded-For: [182.62.34.204])
22:  by commsmail.johnshopkins.edu (mshttpd); Thu, 28 Jul 2011 xx:xx:xx +0800

IP: 182.62.34.204 ---> DiGi Telecommunications Sdn Bhd, MY

gecrackt:

Muguphon: +44-703-190-7688 ---> Magrathea Telecommunications Limited, UK

- kjz

Es nimmt kein Ende:

header:

01: Received: from KD210168238104.ec-userreverse.dion.ne.jp (EHLO
02: dserver.ryusysdesign.com) [210.168.238.104]
03:   by mx0.gmx.net (mx046) with SMTP; 25 Jul 2011 xx:xx:xx +0200
04: Received: from User (unknown [180.215.199.248])
05: 	by dserver.ryusysdesign.com (Postfix) with ESMTPA ID: [ID filtered]
06: 	Sun, 24 Jul 2011 xx:xx:xx +0900 (JST)

IP: 180.215.199.248 ---> MTS-INDIA

der Yahoo/ATT-Mugu:

header:

01: Received: from nm19-vm1.bullet.mail.bf1.yahoo.com (HELO
02: nm19-vm1.bullet.mail.bf1.yahoo.com) [98.139.213.133]
03:   by mx0.gmx.net (mx116) with SMTP; 30 Jul 2011 xx:xx:xx +0200
04: Received: from [98.139.212.148] by nm19.bullet.mail.bf1.yahoo.com with
05: NNFMP; 30 Jul 2011 xx:xx:xx -0000
06: Received: from [98.139.213.10] by tm5.bullet.mail.bf1.yahoo.com with
07: NNFMP; 30 Jul 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by smtp110.mail.bf1.yahoo.com with NNFMP; 30
09: Jul 2011 xx:xx:xx -0000
10: Received: from User (stephane_devos77 [at] 41.218.242.224 with login)
11:         by smtp110.mail.bf1.yahoo.com with SMTP; 30 Jul 2011 xx:xx:xx
12: -0700 PDT

IP: 41.218.242.224 ---> 41-218-242-224-adsl-dyn.4u.com.gh

die Madrid-Konnektion:

header:

01: Received-SPF: softfail (mxbap0: transitioning domain of hotmail.com does
02: not designate 46.37.84.151 as permitted sender) client-ip=46.37.84.151;
03: envelope-from=tuzgwkcy [at] hotmail.com; helo=mx4.hotmail.com;
04: Received: from mx4.hotmail.com (151.red.84.37.46.user.ptvtelecom.com
05: [46.37.84.151])
06: 	by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
07: 	ID: [ID filtered]
08: xx:xx:xx +0200

header:

01: Received-SPF: softfail (mxbap4: transitioning domain of hotmail.com does
02: not designate 46.37.84.151 as permitted sender) client-ip=46.37.84.151;
03: envelope-from=gzood [at] hotmail.com; helo=mx4.hotmail.com;
04: Received: from mx4.hotmail.com (151.red.84.37.46.user.ptvtelecom.com
05: [46.37.84.151])
06: 	by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
07: 	ID: [ID filtered]
08: xx:xx:xx +0200

Muguphon: +34 634 113 129 ---> Vodafone España, S.a.u.

Mugufax: +34 911 817 622 ---> Jazz Telecom, S.a.u.

- kjz

Und wieder mal ist Mugu-Time:

header:

01: Received: from interbankbdi.bi (EHLO mail.interbankbdi.bi) [41.207.99.155]
02:   by mx0.gmx.net (mx010) with SMTP; 02 Aug 2011 xx:xx:xx +0200
03: Received: from localhost (mail.interbankbdi.bi [127.0.0.1])
04: 	by mail.interbankbdi.bi (iRedMail) with ESMTP ID: [ID filtered]
05: 	Mon,  1 Aug 2011 xx:xx:xx +0200 (CAT)
06: Received: from mail.interbankbdi.bi ([127.0.0.1])
07: 	by localhost (mail.interbankbdi.bi [127.0.0.1]) (amavisd-new, port 10024)
08: 	with ESMTP ID: [ID filtered]
09: Received: from User (unknown [212.147.58.128])
10: 	by mail.interbankbdi.bi (iRedMail) with ESMTPA ID: [ID filtered]
11: 	Mon,  1 Aug 2011 xx:xx:xx +0200 (CAT)

IP: 212.147.58.128 ---> 212-147-58-128.fix.access.vtx.ch

gecrackt:

header:

01: Received: from bim.net.tr (HELO mail.bim.net.tr) [212.175.97.143]
02:   by mx0.gmx.net (mx021) with SMTP; 01 Aug 2011 xx:xx:xx +0200
03: Received: (qmail 1347 invoked by UID: [UID filtered]
04: Received: from localhost (HELO mail.bim.net.tr)
05: (avukat [at] bim.net.tr@127.0.0.1)
06:   by mail.bim.net.tr with SMTP; 1 Aug 2011 xx:xx:xx -0000
07: Received: from 120.140.87.96
08:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
09:         by mail.bim.net.tr with HTTP;
10:         Tue, 2 Aug 2011 xx:xx:xx +0300 (EEST)

IP: 120.140.87.96 ---> Packet One Networks (M) Sdn, Malaysia

gecrackt:

Muguphon: +60166461593 ---> DiGi Telecom, Malaysia

header:

01: Received: from mail.chekup.com.br ([201.64.178.178])
02: 	by mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from User (unknown [211.154.133.230])
06: 	by mail.chekup.com.br (Postfix) with ESMTP ID: [ID filtered]
07: 	Wed, 27 Jul 2011 xx:xx:xx -0300 (BRT)

header:

01: Received: from mail.chekup.com.br (EHLO mail.chekup.com.br) [201.64.178.178]
02:   by mx0.gmx.net (mx060) with SMTP; 02 Aug 2011 xx:xx:xx +0200
03: Received: from User (unknown [211.154.133.230])
04: 	by mail.chekup.com.br (Postfix) with ESMTP ID: [ID filtered]
05: 	Wed, 27 Jul 2011 xx:xx:xx -0300 (BRT)

header:

01: Received: from mail.chekup.com.br (EHLO mail.chekup.com.br) [201.64.178.178]
02:   by mx0.gmx.net (mx104) with SMTP; 02 Aug 2011 xx:xx:xx +0200
03: Received: from User (unknown [211.154.133.230])
04: 	by mail.chekup.com.br (Postfix) with ESMTP ID: [ID filtered]
05: 	Wed, 27 Jul 2011 xx:xx:xx -0300 (BRT)

IP: 211.154.133.230 ---> China Motion Network Communication

header:

01: Received: from mout0.freenet.de (EHLO mout0.freenet.de) [195.4.92.90]
02:   by mx0.gmx.net (mx032) with SMTP; 04 Aug 2011 xx:xx:xx +0200
03: Received: from [195.4.92.20] (helo=10.mx.freenet.de)
04: 	by mout0.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from [46.166.129.83] (port=3627 helo=User)
08: 	by 10.mx.freenet.de with esmtpa (ID: [ID filtered]
09: 587) (Exim 4.72 #5)
10: 	ID: [ID filtered]

IP: 46.166.129.83 ---> Santrex

gecrackt:

header:

01: Received: from mout6.freenet.de (EHLO mout6.freenet.de) [195.4.92.96]
02:   by mx0.gmx.net (mx025) with SMTP; 05 Aug 2011 xx:xx:xx +0200
03: Received: from [195.4.92.22] (helo=12.mx.freenet.de)
04: 	by mout6.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from [46.166.129.82] (port=63509 helo=User)
08: 	by 12.mx.freenet.de with esmtpa (ID: [ID filtered]
09: 587) (Exim 4.72 #5)
10: 	ID: [ID filtered]

IP: 46.166.129.82 ---> Santrex Internet Services Ltd., UK

gecrackt:

header:

01: Received: from unknown (EHLO civil.becs.ac.in) [220.225.86.86]
02:   by mx0.gmx.net (mx028) with SMTP; 04 Aug 2011 xx:xx:xx +0200
03: Received: from civil.becs.ac.in (localhost.localdomain [127.0.0.1])
04: 	by civil.becs.ac.in (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
05: 	Thu, 4 Aug 2011 xx:xx:xx +0530
06: Received: (from apache [at] localhost)
07: 	by civil.becs.ac.in (8.14.3/8.14.3/Submit) ID: [ID filtered]
08: 	Thu, 4 Aug 2011 xx:xx:xx GMT
09: X-Authentication-Warning: civil.becs.ac.in: apache set sender to
10: ehablbala33 [at] live.com using -f
11: Received: from 82.128.15.59
12:         (SquirrelMail authenticated user seminar)
13:         by civil.becs.ac.in with HTTP;
14:         Thu, 4 Aug 2011 xx:xx:xx -0000

IP: 82.128.15.59 ---> ml82.128.15.59.multilinks.com, Nigeria

gecrackt:

der Yahoo/ATT-Mugu:

header:

01: Received: from nm27-vm1.bullet.mail.bf1.yahoo.com
02: (nm27-vm1.bullet.mail.bf1.yahoo.com [98.139.213.148])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Thu,  4 Aug 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.212.153] by nm27.bullet.mail.bf1.yahoo.com with
06: NNFMP; 04 Aug 2011 xx:xx:xx -0000
07: Received: from [98.139.213.8] by tm10.bullet.mail.bf1.yahoo.com with
08: NNFMP; 04 Aug 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by smtp108.mail.bf1.yahoo.com with NNFMP; 04
10: Aug 2011 xx:xx:xx -0000
11: Received: from User (seennpost332 [at] 66.180.119.154 with login)
12:         by smtp108.mail.bf1.yahoo.com with SMTP; 04 Aug 2011 xx:xx:xx
13: -0700 PDT

IP: 66.180.119.154 ---> mail.mathisdonheiser.com/CBEYOND COMMUNICATIONS

header:

01: Received: from relay03.kiev.sovam.com (EHLO relay03.kiev.sovam.com)
02: [62.64.120.201]
03:   by mx0.gmx.net (mx089) with SMTP; 05 Aug 2011 xx:xx:xx +0200
04: Received: from [188.163.100.187] (helo=User)
05: 	by relay03.kiev.sovam.com with smtp (Exim 4.72 (FreeBSD))
06: 	(envelope-from <jeniferrogers [at] hotmail.com>)
07: 	ID: [ID filtered]

IP: 188.163.100.187 ---> Golden Telecom Ukraine

- kjz

It's Mugu time again:

auch dieser Spanien-Mugu deucht mir bekannt:

header:

01: Received: from mx4.hotmail.com (151.red.84.37.46.user.ptvtelecom.com
02: [46.37.84.151])
03: 	by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200

header:

01: Received: from mx4.hotmail.com (151.red.84.37.46.user.ptvtelecom.com
02: [46.37.84.151])
03: 	by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200

Muguphon: +34 634 113 129 ---> Vodafone España, S.a.u.

Mugufax: +34 911 817 622 ---> Jazz Telecom, S.a.u.

header:

01: Received: from smtp-out02.msg.oleane.net (EHLO
02: smtp-out02.msg.oleane.net) [62.161.3.11]
03:   by mx0.gmx.net (mx102) with SMTP; 03 Aug 2011 xx:xx:xx +0200
04: Received: from smtp02.msg.oleane.net (smtp02.mail.priv [172.17.20.111])
05: 	by smtp-out02.msg.oleane.net with ESMTP ID: [ID filtered]
06: 	Wed, 3 Aug 2011 xx:xx:xx +0200
07: Received: from smtp02.msg.oleane.net (localhost [127.0.0.1])
08: 	by smtp02.msg.oleane.net (MTA-AV) with ESMTP ID: [ID filtered]
09: 	Wed, 3 Aug 2011 xx:xx:xx +0200
10: Received: from srv-msg.hild.fr ([81.255.73.153]) (authenticated)
11: 	by smtp02.msg.oleane.net (MTA) with ESMTP ID: [ID filtered]
12: 	Wed, 3 Aug 2011 xx:xx:xx +0200
13: X-Oleane-Rep: REPA
14: Received: from User ([93.97.51.3]) by srv-msg.hild.fr with Microsoft
15: SMTPSVC(6.0.3790.3959);
16: 	 Wed, 3 Aug 2011 xx:xx:xx +0200

IP: 93.97.51.3 ---> 93-97-51-3.zone5.bethere.co.uk

Muguphon : +234-709-447-7929 ---> Multi-links Telecommunications Ltd., Nigeria

header:

01: Received: from mail.usinasinimbu.com.br (EHLO
02: cardeal.usinasinimbu.com.br) [200.199.89.101]
03:   by mx0.gmx.net (mx047) with SMTP; 07 Aug 2011 xx:xx:xx +0200
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by cardeal.usinasinimbu.com.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat,  6 Aug 2011 xx:xx:xx -0300 (BRT)
07: X-Virus-Scanned: amavisd-new at usinasinimbu.com.br
08: Received: from cardeal.usinasinimbu.com.br ([127.0.0.1])
09: 	by localhost (cardeal.usinasinimbu.com.br [127.0.0.1]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from cardeal.usinasinimbu.com.br (cardeal.usinasinimbu.com.br
13: [172.16.0.2])
14: 	by cardeal.usinasinimbu.com.br (Postfix) with ESMTP ID: [ID filtered]
15: 	Sat,  6 Aug 2011 xx:xx:xx -0300 (BRT)

X-Originating-IP: [82.128.80.28] ---> Multilinks Telecommunications Limited, Nigeria

gecrackt:

Muguphon: +234 7033528139 ---> MTN Nigeria Communications Ltd.

- kjz

40 Beiträge dieses Themas auf einer Seite anzeigen

Alle Zeitangaben in WEZ +2. Es ist jetzt 06:18 Uhr.

Antispam e.V. / Impressum